Static task
static1
Behavioral task
behavioral1
Sample
9aada37736c134edb23258a5c6a545d2b0f587e9f2e545c0abf3591688a7b90f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9aada37736c134edb23258a5c6a545d2b0f587e9f2e545c0abf3591688a7b90f.exe
Resource
win10v2004-20220812-en
General
-
Target
9aada37736c134edb23258a5c6a545d2b0f587e9f2e545c0abf3591688a7b90f
-
Size
2.6MB
-
MD5
1ff227da9e1d123347b1e356e47f96e0
-
SHA1
69050764989052fc53b73348c5ae1079b36baf3d
-
SHA256
9aada37736c134edb23258a5c6a545d2b0f587e9f2e545c0abf3591688a7b90f
-
SHA512
56fff58333c348062ccd8c14678e01859bf76f93a5170dcff45de27e2e0e8c3c79c3e9e85250d2785db0a8ba82503b5e86c800a4bb21aa28fd3aa1e03f9a455e
-
SSDEEP
49152:UyVdVQ1goHfUxeHiTTsIRzrDfz7aND4y15a/4iTn4Ln83gFPJ0u:Fqg7x0ys44D7La/3T4b83g30
Malware Config
Signatures
Files
-
9aada37736c134edb23258a5c6a545d2b0f587e9f2e545c0abf3591688a7b90f.exe windows x86
175369224eb3be6fb350fddfaa3ff3fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
InternetReadFile
comdlg32
PageSetupDlgA
wsock32
send
pquery.bin
WyQueryPYWhole
msvcrt
_gcvt
lz32
LZOpenFileA
Sections
CODE Size: 2.5MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE