Static task
static1
Behavioral task
behavioral1
Sample
09922d740f547b1d4487c42df06dfeea90833c1164246f5c1311323713961644.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
09922d740f547b1d4487c42df06dfeea90833c1164246f5c1311323713961644.exe
Resource
win10v2004-20221111-en
General
-
Target
09922d740f547b1d4487c42df06dfeea90833c1164246f5c1311323713961644
-
Size
812KB
-
MD5
4a1fe7d5708a84d2ddee93ef82398310
-
SHA1
04dd17f87e7632a035358ea21b37e367b8852f72
-
SHA256
09922d740f547b1d4487c42df06dfeea90833c1164246f5c1311323713961644
-
SHA512
7ce8f8618287fbcf645034d9f372aa9fb840e12f81390d1807a8459b31be0967edd57331af0eea4d6dae92855324e5602106c0e41762dc74b9f3099d7cb3dcae
-
SSDEEP
24576:QoOBncfk/Ad5Sb5S5Np74s4Ddxc/BMbgS9e8a5b:QomcfCo5Sbg5Dyxxl9/a5
Malware Config
Signatures
Files
-
09922d740f547b1d4487c42df06dfeea90833c1164246f5c1311323713961644.exe windows x86
d3a62f23d6cb9e7c4a78ec83b9d40ce7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
GetCommandLineA
EnumResourceTypesW
HeapCreate
CreateSemaphoreA
Sleep
GetModuleHandleA
CloseHandle
OpenEventA
lstrlenW
SuspendThread
GetEnvironmentVariableA
GetCommandLineA
HeapDestroy
GetStartupInfoA
CloseHandle
SetLastError
FindVolumeClose
WriteConsoleA
DeleteFileA
advapi32
IsValidSid
RegCreateKeyExW
IsValidSid
InitializeSid
IsValidSid
CreateServiceW
IsValidAcl
RegEnumKeyA
RegDeleteValueA
IsValidSid
ControlService
CloseEventLog
IsValidSid
ddrawex
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 806KB - Virtual size: 805KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ