Static task
static1
Behavioral task
behavioral1
Sample
934b5666c1cecdc2ffd0d7f9cbfd4dcd6985fd0d4dde72a7cc1337da83a6d62f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
934b5666c1cecdc2ffd0d7f9cbfd4dcd6985fd0d4dde72a7cc1337da83a6d62f.exe
Resource
win10v2004-20220812-en
General
-
Target
934b5666c1cecdc2ffd0d7f9cbfd4dcd6985fd0d4dde72a7cc1337da83a6d62f
-
Size
390KB
-
MD5
4f20067650c88ce5b31b02d244b4ded1
-
SHA1
852f5fb0a64dd30bcac6be6057ac581a4d5a0d5f
-
SHA256
934b5666c1cecdc2ffd0d7f9cbfd4dcd6985fd0d4dde72a7cc1337da83a6d62f
-
SHA512
5a631e50b07fb01d3e7432e1f42484d2ea6687c416d90c8e171cb5d83b4458055c38ab69b827849c6e58e2832c50e17e12cb7f48e5e5afdaa6df30d998e88544
-
SSDEEP
6144:kqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:GO1xm+QoK0t4K3gCTDYWGrYzt+NST
Malware Config
Signatures
Files
-
934b5666c1cecdc2ffd0d7f9cbfd4dcd6985fd0d4dde72a7cc1337da83a6d62f.exe windows x86
5840266f88c6a4cb179e24026d63c088
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
HeapCreate
GetModuleHandleA
GetComputerNameA
LocalUnlock
GetTickCount
GetDiskFreeSpaceA
CloseHandle
LocalFree
Sleep
LoadLibraryW
FindVolumeClose
GetSystemTime
SetLastError
CreateFileA
CreateThread
FormatMessageA
ResetEvent
UnmapViewOfFile
lstrlenA
user32
GetDlgItem
DrawMenuBar
DrawEdge
CheckRadioButton
CreateWindowExA
DispatchMessageA
DrawStateA
FillRect
CallWindowProcA
SetFocus
IsWindow
GetDC
GetComboBoxInfo
advapi32
RegEnumValueA
RegDeleteKeyA
IsTokenUntrusted
FreeSid
RegCloseKey
hdwwiz.cpl
AddHardwareWizard
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ