Static task
static1
Behavioral task
behavioral1
Sample
1c7dfbd2d886ecd2ebfa7f4c6f6e4b9e4fd0f87f628effbfd62a53c3070861b1.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1c7dfbd2d886ecd2ebfa7f4c6f6e4b9e4fd0f87f628effbfd62a53c3070861b1.exe
Resource
win10v2004-20220414-en
General
-
Target
1c7dfbd2d886ecd2ebfa7f4c6f6e4b9e4fd0f87f628effbfd62a53c3070861b1
-
Size
102KB
-
MD5
b615ff689101509b760415b534294205
-
SHA1
5850c0b7a2783482c093aeed72ab212b0dabe6fe
-
SHA256
1c7dfbd2d886ecd2ebfa7f4c6f6e4b9e4fd0f87f628effbfd62a53c3070861b1
-
SHA512
1eb7f5b08d9fd19a26f1f75368dbd9e0af74c9bfeb361a8d5ad89c67c3b9562038d78e4621df2723b8176e28418c74500c5dd6ac9ac04b898783d8e0384fc3b4
-
SSDEEP
1536:kLUXtxQypBSAHMOdAhezBhgmnK5649QAqZD0EinrGOlI3M4a50R3ddbhUfIVIjE1:tQCBSARAhGBhgO495KzODINdR/2f+P
Malware Config
Signatures
Files
-
1c7dfbd2d886ecd2ebfa7f4c6f6e4b9e4fd0f87f628effbfd62a53c3070861b1.exe windows x86
e8f166a7db37a0993158607baffdd6c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
clbcatq
DowngradeAPL
SetSetupOpen
ComPlusMigrate
SetSetupSave
cmpbk32
PhoneBookEnumCountries
PhoneBookEnumNumbers
PhoneBookCopyFilter
PhoneBookFreeFilter
PhoneBookLoad
kernel32
CreateSemaphoreA
GetModuleHandleW
GetExitCodeProcess
GetLocalTime
GetWindowsDirectoryW
EnterCriticalSection
GetVersionExA
CreateFileMappingW
LoadLibraryA
WriteConsoleW
FindResourceA
CreateEventA
GetStartupInfoA
LoadLibraryExW
GetDateFormatA
GetProcAddress
WaitNamedPipeW
OpenFileMappingA
HeapAlloc
OpenWaitableTimerW
user32
LoadIconA
DispatchMessageA
LoadBitmapW
GetPropW
DialogBoxParamA
CreateDesktopW
FlashWindow
PostMessageW
DrawStateA
LoadMenuW
Sections
text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 1024B - Virtual size: 704B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ