Static task
static1
Behavioral task
behavioral1
Sample
4959869bd734b829215f61637a4fa6c438c29d5f725bb8c1e0d992cf935f07cf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4959869bd734b829215f61637a4fa6c438c29d5f725bb8c1e0d992cf935f07cf.exe
Resource
win10v2004-20220812-en
General
-
Target
4959869bd734b829215f61637a4fa6c438c29d5f725bb8c1e0d992cf935f07cf
-
Size
774KB
-
MD5
609830559e16e34b74dd04f7b4310e63
-
SHA1
872b4edeb78fbac450d6b8c38ced95c71c5c4a05
-
SHA256
4959869bd734b829215f61637a4fa6c438c29d5f725bb8c1e0d992cf935f07cf
-
SHA512
7b10a6f0524ad8c4fc1d85d7070ec9d0a37b34ec3d3b365b5a99ebcc60490f5ed3dc6fdfb668aaf4061a332cfe4b2f7ff36d3b1c78bf80f35e0260295a5446c3
-
SSDEEP
24576:irQ2XLDv9nfIV6u5BQIeBf4gYbsEkNcza6:r2D2V75BQIeJ4gYwEU4l
Malware Config
Signatures
Files
-
4959869bd734b829215f61637a4fa6c438c29d5f725bb8c1e0d992cf935f07cf.exe windows x86
7cc9482414dcc74c10f30ec43c3cbd99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileAttributesA
CloseHandle
GetSystemTime
ResumeThread
lstrlenA
GetDiskFreeSpaceA
FindAtomA
CreateThread
GetComputerNameA
GetTickCount
HeapCreate
LoadLibraryW
ResetEvent
GetDateFormatA
GetModuleHandleA
LocalFree
SetLastError
GetCommandLineW
GetDriveTypeA
advapi32
GetFileSecurityW
GetUserNameA
GetLengthSid
FreeSid
CreateServiceA
RegEnumValueA
RegEnumKeyExA
IsTokenUntrusted
CloseEventLog
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
clbcatq
CheckMemoryGates
DllGetClassObject
SetupOpen
SetSetupSave
ComPlusMigrate
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE