Static task
static1
Behavioral task
behavioral1
Sample
ce5dfa3bce47ee46de3f6f561bbae91720a224cce429c805bd86418197ffd78e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce5dfa3bce47ee46de3f6f561bbae91720a224cce429c805bd86418197ffd78e.exe
Resource
win10v2004-20220812-en
General
-
Target
ce5dfa3bce47ee46de3f6f561bbae91720a224cce429c805bd86418197ffd78e
-
Size
134KB
-
MD5
49e9c72c453dc0af578213d317ec6d10
-
SHA1
700bbd0de2c608939afc849eab991f12a16a2db5
-
SHA256
ce5dfa3bce47ee46de3f6f561bbae91720a224cce429c805bd86418197ffd78e
-
SHA512
6140cab1079208f434f101e3a89da1956358682ff03a7710982025f4d75af86dba7c3d329a55d1b8430b95b37988e7fd1fe9928952e621d28f64cdd0a67cf08c
-
SSDEEP
1536:ZDCzR+DpMyQJbb5bvVNhTVxRLceT8trA/7IyKXLXNO4us/dn7qB/k9B1XBZtAeej:ZDd+lRLZT8tO8/LXEsFn7q+J3egY
Malware Config
Signatures
Files
-
ce5dfa3bce47ee46de3f6f561bbae91720a224cce429c805bd86418197ffd78e.exe windows x86
34ff4052f15a71f0eb6144fc01537341
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeW
GetPrivateProfileIntW
CreateEventW
CreateEventW
HeapFree
VirtualProtect
lstrlenA
TlsGetValue
ResumeThread
SetLastError
CreateEventW
LoadLibraryW
GetDriveTypeA
GetProcessHeap
GetProcessVersion
GetVolumePathNameA
SuspendThread
FindAtomA
GetPrivateProfileSectionA
GetCurrentThread
DeleteFileA
clbcatq
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
SetupOpen
gpedit
ExportRSoPData
DllGetClassObject
DllCanUnloadNow
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE