Static task
static1
Behavioral task
behavioral1
Sample
9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33.exe
Resource
win10v2004-20220812-en
General
-
Target
9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33
-
Size
170KB
-
MD5
307470952c744dd7933bc4ebac9e8951
-
SHA1
80e7c601d3c028e611032daccbdc36675e31f8f7
-
SHA256
9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33
-
SHA512
d8f254aacbb93cd76b01bb4ebf108c03c8d2e04fb7f59b6810c5cc67d09bac1a265df70e27cb509b01e6910a27e06f2342817f4f5c028a2f31bb4079a0d8cc60
-
SSDEEP
3072:w5A4b8drcTgxzKWcNiB5H41fFi9JBvxNpfV8jvhNeh3SqMyDZ:IA4b8V2g9KGYFGJBvn8jvzejhN
Malware Config
Signatures
Files
-
9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33.exe windows x86
7874bb8909c35aeaf35c59b7b7f8a2ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shlwapi
PathAddBackslashA
kernel32
GetTimeZoneInformation
ResetEvent
GetFullPathNameA
GetAtomNameW
FileTimeToSystemTime
SetEvent
lstrcpyA
OutputDebugStringA
LeaveCriticalSection
WaitForSingleObject
LoadLibraryW
EnumResourceNamesA
InitializeCriticalSection
Sleep
DeleteCriticalSection
CreateThread
QueryMemoryResourceNotification
GetFullPathNameW
GetProcAddress
LoadLibraryA
GetTickCount
EnterCriticalSection
IsDBCSLeadByte
GetTempPathA
FreeLibrary
msimg32
AlphaBlend
TransparentBlt
winmm
mciSendCommandA
sndPlaySoundA
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ