Static task
static1
Behavioral task
behavioral1
Sample
9850d3d70f8bc02e8fc52fe5cc08eb97e842f99707322cebbc59e4326538e391.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9850d3d70f8bc02e8fc52fe5cc08eb97e842f99707322cebbc59e4326538e391.exe
Resource
win10v2004-20220812-en
General
-
Target
9850d3d70f8bc02e8fc52fe5cc08eb97e842f99707322cebbc59e4326538e391
-
Size
389KB
-
MD5
216f768af1338ec22f2030218e202aa0
-
SHA1
1eb1b13de2c318cee2aadb188ac3f2497c6bbc73
-
SHA256
9850d3d70f8bc02e8fc52fe5cc08eb97e842f99707322cebbc59e4326538e391
-
SHA512
9f8bf3d724a1d55d8fdec53475997bed4b41504189feb360e2943ad5536792908c758cf48788c7ded40f247b93d6d964eba755615f5759e19f9b752ce81117f7
-
SSDEEP
6144:2JXMYhcQOaCq3973g/Acw0WV9w3zR7lvf5msXxZ+9XNOcRa:2JXMe93gIbd4PvB7+9X
Malware Config
Signatures
Files
-
9850d3d70f8bc02e8fc52fe5cc08eb97e842f99707322cebbc59e4326538e391.exe windows x86
fa21d3f8edf31425fee44ea8823c7f9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
SizeofResource
CreateFileA
FindClose
GetACP
_lread
TlsFree
TlsFree
EnumSystemGeoID
GetConsoleTitleA
GlobalFree
DeleteAtom
GetVolumePathNameA
DuplicateHandle
EncodePointer
GlobalFree
AttachConsole
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
Sections
.text Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 487KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE