Static task
static1
Behavioral task
behavioral1
Sample
c34f6302391cdb989cc3009e83925ae6489eb32c53e7c44a2f86edaec000e39d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c34f6302391cdb989cc3009e83925ae6489eb32c53e7c44a2f86edaec000e39d.exe
Resource
win10v2004-20220901-en
General
-
Target
c34f6302391cdb989cc3009e83925ae6489eb32c53e7c44a2f86edaec000e39d
-
Size
878KB
-
MD5
0c01ce9cd307dd1f4f19696ed8847170
-
SHA1
8ccb0367c25bee2cbcce526be3588bf8bac92d04
-
SHA256
c34f6302391cdb989cc3009e83925ae6489eb32c53e7c44a2f86edaec000e39d
-
SHA512
8607fc5cd71dcfc79ec85d1714a2f0464602001a1bc951d2ef016d13357abb0b95f8b44aafd51d184a961fcb5a303bacd2b0665c97f467525069371d587a5529
-
SSDEEP
24576:o6964ifHNEnqXjV9lOy+nPWHAvIbKRQl:oSeHunqJey+nugv9RQ
Malware Config
Signatures
Files
-
c34f6302391cdb989cc3009e83925ae6489eb32c53e7c44a2f86edaec000e39d.exe windows x86
3427b8f2b8e962b5df5830f8ae022688
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
GetGeoInfoA
OpenEventW
Heap32First
GetGeoInfoA
VirtualProtectEx
GetModuleHandleW
GetModuleHandleA
GetGeoInfoA
ReleaseSemaphore
GetModuleFileNameA
lstrcatA
CreateEventW
GetTickCount
GetGeoInfoA
GetCalendarInfoA
wmpdxm
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject
Sections
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.DATA Size: 868KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ