Static task
static1
Behavioral task
behavioral1
Sample
9c19cd90a60f03daf2a994ea1bfe5b24c7bd0724104c888ca7e9a8e12bb59236.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c19cd90a60f03daf2a994ea1bfe5b24c7bd0724104c888ca7e9a8e12bb59236.exe
Resource
win10v2004-20220812-en
General
-
Target
9c19cd90a60f03daf2a994ea1bfe5b24c7bd0724104c888ca7e9a8e12bb59236
-
Size
359KB
-
MD5
a93437482919f9878815dd7760636fb8
-
SHA1
8d0a9db79657c1f5fd1143b7feaf1932bb906c88
-
SHA256
9c19cd90a60f03daf2a994ea1bfe5b24c7bd0724104c888ca7e9a8e12bb59236
-
SHA512
6d255eab1c6231a41b38835ea49ac48f7ce37cd9b2bb782545ffe62cc66e92b5e796218cec152af7b4c73cf700f8ecbb57314fe3f60d0b711b1e476e76157e73
-
SSDEEP
6144:K3D7wTNXJR+MmGKC/MMyYtg5QcPS3Yz54HuLdynLsa9bvhYYc:aQ1+MSJYy3SIz9MnLh9bvO
Malware Config
Signatures
Files
-
9c19cd90a60f03daf2a994ea1bfe5b24c7bd0724104c888ca7e9a8e12bb59236.exe windows x86
b2203381da54ca0354619274f14cb3bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
SetEvent
Sleep
GetStartupInfoA
GetLastError
DeleteCriticalSection
VirtualProtect
GetDiskFreeSpaceA
GetCalendarInfoA
CreateThread
ReleaseMutex
TlsGetValue
FindAtomA
SearchPathA
FindClose
GetTickCount
CloseHandle
FindVolumeClose
GetModuleHandleA
FindResourceExA
advapi32
RegLoadKeyA
RegEnumKeyExA
LsaSetSecret
RegCloseKey
CloseTrace
OpenEventLogA
CloseEventLog
LsaClose
RegCreateKeyExA
LsaFreeMemory
FreeSid
GetFileSecurityA
IsValidSid
AccessCheck
RegCloseKey
msdtcuiu
DtcPerfOpen
DllGetClassObject
DtcPerfCollect
DtcPerfClose
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ