Static task
static1
Behavioral task
behavioral1
Sample
4034fcb9a34971da5d2a327c4d1593b030f4623082fb32049f95ebe2d9aafa1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4034fcb9a34971da5d2a327c4d1593b030f4623082fb32049f95ebe2d9aafa1b.exe
Resource
win10v2004-20220812-en
General
-
Target
4034fcb9a34971da5d2a327c4d1593b030f4623082fb32049f95ebe2d9aafa1b
-
Size
1021KB
-
MD5
69c624d3aac4a65355da0efe9bc9bb80
-
SHA1
3f582179fe5bd049f900968990c62686833365ca
-
SHA256
4034fcb9a34971da5d2a327c4d1593b030f4623082fb32049f95ebe2d9aafa1b
-
SHA512
5262bbf0b733bbec476a8d2f6c8571091f115161ae26e630ef7884cb480a8eb1a4dc098ae1ec9ea640d919ea6e9dc39089fc4b9bcc5aa3f4a6678546266cbb3f
-
SSDEEP
24576:Cjg1OUQt378+aNv5F9Aw5EJ1HILPXh4nHvQvd8XHjRjC:lsUF+2F2kO1HILfh4HUdA5C
Malware Config
Signatures
Files
-
4034fcb9a34971da5d2a327c4d1593b030f4623082fb32049f95ebe2d9aafa1b.exe windows x86
2d9a9dd224f32494878d64d3ca4109d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCloneImage
gdi32
CreateFontIndirectA
shell32
Shell_NotifyIconA
kernel32
LCMapStringW
AddAtomW
IsBadCodePtr
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
CloseHandle
LCMapStringA
GetLastError
GetModuleHandleA
RaiseException
GetCurrentProcess
GetStringTypeA
EnumResourceNamesA
LoadLibraryExA
SetStdHandle
DeleteCriticalSection
RegisterWaitForSingleObject
GetSystemTimeAsFileTime
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcessId
EnterCriticalSection
IsBadReadPtr
FlushFileBuffers
HeapAlloc
GetCurrentThreadId
SizeofResource
Sections
.text Size: 842KB - Virtual size: 841KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ