Static task
static1
Behavioral task
behavioral1
Sample
934d267b94c73a753d90ef994a8cbbf7b61d49fd7ee7759fc013134594ea16c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
934d267b94c73a753d90ef994a8cbbf7b61d49fd7ee7759fc013134594ea16c7.exe
Resource
win10v2004-20220901-en
General
-
Target
934d267b94c73a753d90ef994a8cbbf7b61d49fd7ee7759fc013134594ea16c7
-
Size
53KB
-
MD5
5b27aa481d2bc193a25fe9350ba03ba2
-
SHA1
c225e4510a7a4b218827602c1173b86aa8d6240d
-
SHA256
934d267b94c73a753d90ef994a8cbbf7b61d49fd7ee7759fc013134594ea16c7
-
SHA512
34241eda8142c6f32f1777edfd98ffbd85916dd01ebf91a1d1759a0e406ac92541f67a6cace83c71a4d27499216992553de7c8d20c4a4477d3d387667b2417a5
-
SSDEEP
768:Lrp6mS3iS8gqqNClpXxY68rIXVH5B8t4jd:LldS3iA0Xj8cu0
Malware Config
Signatures
Files
-
934d267b94c73a753d90ef994a8cbbf7b61d49fd7ee7759fc013134594ea16c7.exe windows x86
89275d5de45bcf7d3069fa7fe34b66e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
lstrcpyW
UnmapViewOfFile
SetThreadPriority
GetProcessHeap
lstrcpynW
HeapFree
IsBadReadPtr
CreateFileMappingW
GetCurrentProcessId
CreateProcessW
CreateFileW
GetExitCodeProcess
CloseHandle
GetFileTime
GetTempFileNameW
GetComputerNameW
SetLastError
GetSystemTime
WideCharToMultiByte
FindFirstFileW
CreateEventW
CreateMutexW
MultiByteToWideChar
DisconnectNamedPipe
CopyFileW
GetLocalTime
GetThreadPriority
HeapReAlloc
Sleep
GetSystemTimeAsFileTime
GetModuleHandleA
WriteProcessMemory
GetVersionExW
SetEvent
WriteFile
lstrcmpiW
ExpandEnvironmentStringsW
GetFileSize
LeaveCriticalSection
MapViewOfFile
FindClose
GetCommandLineA
GetModuleFileNameW
ReadFile
HeapAlloc
GlobalUnlock
SetFileAttributesW
lstrlenW
SetFileTime
lstrlenA
ReleaseMutex
EnterCriticalSection
GetLogicalDrives
GetTimeZoneInformation
DeleteFileW
GetCurrentThreadId
GetTickCount
lstrcmpiA
GetFileSizeEx
user32
GetDlgItemTextW
Sections
.kxkl Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nyzsr Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdcf Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rgn Size: 25KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ