Static task
static1
Behavioral task
behavioral1
Sample
a9994f02e427e84a984dbc935dad02329a9bf9b882ad98316b34827c02cdea73.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9994f02e427e84a984dbc935dad02329a9bf9b882ad98316b34827c02cdea73.exe
Resource
win10v2004-20220901-en
General
-
Target
a9994f02e427e84a984dbc935dad02329a9bf9b882ad98316b34827c02cdea73
-
Size
372KB
-
MD5
3942f29038dbfe428f7b2b9f01f42736
-
SHA1
0e396f2737d22ebb3c1979e9922a0880212fec89
-
SHA256
a9994f02e427e84a984dbc935dad02329a9bf9b882ad98316b34827c02cdea73
-
SHA512
a0cf09280f1031700bd5d0781d3781fa4ce5d1c00b4a4a57334242c4a23bbbece08524c693a9efd3943d4a03b9848bb84922c90c55aaa8ff9ae97eb9a951dd59
-
SSDEEP
6144:wjNK6TQRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:mNK6TQneF8m4ewS/HcF+ih7wp10l1h+H
Malware Config
Signatures
Files
-
a9994f02e427e84a984dbc935dad02329a9bf9b882ad98316b34827c02cdea73.exe windows x86
d94106dddc8aa5e2c7262f1cce5053ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetModuleHandleW
ExitThread
VirtualAlloc
GlobalFree
FreeConsole
FindAtomW
GetComputerNameW
GetPrivateProfileIntW
CloseHandle
lstrlenA
GetTickCount
GetLocalTime
LocalFree
GetExitCodeProcess
FindVolumeClose
GetFileAttributesW
GetDriveTypeA
GlobalSize
CreateFileA
user32
CloseWindow
GetClassInfoA
GetClientRect
FillRect
CallWindowProcA
EndDialog
DrawStateA
DispatchMessageA
GetDlgItem
CreateWindowExA
GetCaretPos
GetMenu
GetCursorInfo
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
msexch40
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ