Static task
static1
Behavioral task
behavioral1
Sample
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
Resource
win10v2004-20220901-en
General
-
Target
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7
-
Size
134KB
-
MD5
4dd9280fcb66e30c3a4c18f1d1b7f0ca
-
SHA1
33c5e9a4ff30fbc4b6ae7a09b59d83a6694b4960
-
SHA256
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7
-
SHA512
32213a0b67110bfe265a0bc357cc16535a41bfcce20c885227e60cfd1c471e7a7b68d8b7ea3948ab9d6ce874b8c77494f7f4e5f7c313efcfaaefb835ae026086
-
SSDEEP
3072:MkblZSkc5IPC2K7ma7/4tKqD3boLUaUPfePgY:xbbSYPC2Xa7/4tbci3yg
Malware Config
Signatures
Files
-
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe windows x86
59b3d448f6b41d982e7e16e7a5cc78be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetVolumePathNameA
CreateEventW
lstrlenA
VirtualProtect
GetProcessHeap
HeapFree
CreateEventW
TlsGetValue
CreateEventW
SuspendThread
GetCurrentThread
LoadLibraryW
GetStartupInfoA
GetProcessVersion
GetDriveTypeA
GetStringTypeW
SetLastError
FindAtomW
ResumeThread
GetPrivateProfileSectionA
clbcatq
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
DllGetClassObject
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
gpedit
BrowseForGPO
DllCanUnloadNow
ExportRSoPData
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE