Static task
static1
Behavioral task
behavioral1
Sample
9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232.exe
Resource
win10v2004-20220812-en
General
-
Target
9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232
-
Size
408KB
-
MD5
6f3c1757d6c2ecac50cf6edc678b3e1f
-
SHA1
cad388cd8807de3920e6b95cf2322ed1e9138363
-
SHA256
9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232
-
SHA512
7600325d1f80cfa84c497825fc55060bd93b792e2f22035de86f05d5769db0c344d80b0e63a1b3762ff7eebcc0e9cca2815c974b03262f281b43222a15f462e8
-
SSDEEP
12288:NbqfBlvVwfiwKQOQ2QreZ82Bt+HvsVW1FFGOg:NbqfLVXswkcsHOWP8O
Malware Config
Signatures
Files
-
9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232.exe windows x86
ab1a12607f150345dc3231882a8cbd46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetStringTypeW
LoadLibraryW
TlsGetValue
FindAtomW
HeapFree
CreateEventW
GetPrivateProfileSectionA
GetProcessHeap
GetCurrentThread
GetStartupInfoA
GetDriveTypeA
GetProcessVersion
VirtualProtect
lstrlenA
DeleteFileA
CreateEventW
SuspendThread
GetVolumePathNameA
CreateEventW
ResumeThread
clbcatq
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
SetupOpen
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
gpedit
DllCanUnloadNow
BrowseForGPO
DllGetClassObject
ExportRSoPData
Sections
.text Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 401KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE