Static task
static1
Behavioral task
behavioral1
Sample
478cdf1ede2c57dfc8bfed20e51f6a9054a8b068cdb986fecc8ede9bb8bd57e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
478cdf1ede2c57dfc8bfed20e51f6a9054a8b068cdb986fecc8ede9bb8bd57e3.exe
Resource
win10v2004-20220812-en
General
-
Target
478cdf1ede2c57dfc8bfed20e51f6a9054a8b068cdb986fecc8ede9bb8bd57e3
-
Size
308KB
-
MD5
685e61140bb6257d5df472344ed59270
-
SHA1
e208a8a13f526a77bff53c793b6ca0bde448bb0d
-
SHA256
478cdf1ede2c57dfc8bfed20e51f6a9054a8b068cdb986fecc8ede9bb8bd57e3
-
SHA512
005b12e6e7d41cfbe20f3eb642cfb9ee574bc55ddfc74d6e38f04923ee7dd99871daaf57e9d056f43abc4e8a146be5ed2c3711281757bb735638a81f96e7e189
-
SSDEEP
6144:GLph8b91F4JzDzhJ2JXaK63oWCRy12h5zvDV63ys9vHLce+CymSve2LPHZEjv:8v8b9UhNJ2JX96+zvh63l9riCytve2LK
Malware Config
Signatures
Files
-
478cdf1ede2c57dfc8bfed20e51f6a9054a8b068cdb986fecc8ede9bb8bd57e3.exe windows x86
9bf184c3d691b58a662a97c8d5316949
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
lstrlenA
DeleteFileA
CreateEventW
VirtualProtectEx
LoadLibraryW
GetPrivateProfileIntW
TlsGetValue
ResumeThread
GetDriveTypeA
GetProcessHeap
HeapFree
ClearCommBreak
DeviceIoControl
GetStringTypeW
HeapDestroy
DeviceIoControl
GetPrivateProfileSectionA
CreateMutexW
SetLastError
GetCurrentThread
clbcatq
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
CheckMemoryGates
SetSetupSave
SetupOpen
ComPlusMigrate
SetupOpen
DllGetClassObject
SetSetupSave
pdh
PdhGetLogFileTypeA
PdhGetLogFileSize
PdhCloseLog
PdhAddCounterA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ