Static task
static1
Behavioral task
behavioral1
Sample
34959f8a21b4b5dbc77b44a397f247006468d4c8b7b9f9ee86f82571a94b55dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34959f8a21b4b5dbc77b44a397f247006468d4c8b7b9f9ee86f82571a94b55dd.exe
Resource
win10v2004-20220901-en
General
-
Target
34959f8a21b4b5dbc77b44a397f247006468d4c8b7b9f9ee86f82571a94b55dd
-
Size
814KB
-
MD5
424cedce1c3f053c5d2fdbcd56c915a6
-
SHA1
7be2605e03eb4942267b28a336a439d413cc9062
-
SHA256
34959f8a21b4b5dbc77b44a397f247006468d4c8b7b9f9ee86f82571a94b55dd
-
SHA512
4e08014188287ebe078db6a0d61495e0be16d0b97042010f1f4f1059c1c45b7d584a723b568624c517fbf38efffbb995a18a906528a27fb7d464a28e24afbf97
-
SSDEEP
24576:WBHU2NCTaNv/tMzGPm/6eeg6i1+pkism2c:WB0wIsvEGPH1gH+G3m2
Malware Config
Signatures
Files
-
34959f8a21b4b5dbc77b44a397f247006468d4c8b7b9f9ee86f82571a94b55dd.exe windows x86
28fe1da96977afff28303aa15a21cb94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetDriveTypeW
LoadLibraryA
FindResourceW
GetDriveTypeW
GetCurrentDirectoryW
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
lstrlenA
GetVolumePathNameA
DeleteFileW
GetDriveTypeW
VirtualAlloc
OpenMutexA
GetDriveTypeW
GetVolumeInformationW
msxml6
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllSetProperty
Sections
.play Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ