Static task
static1
Behavioral task
behavioral1
Sample
b0ce906b5887876f27302971aaa4879fef2367848a36ce4a31e8f3914e3ad27f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0ce906b5887876f27302971aaa4879fef2367848a36ce4a31e8f3914e3ad27f.exe
Resource
win10v2004-20220812-en
General
-
Target
b0ce906b5887876f27302971aaa4879fef2367848a36ce4a31e8f3914e3ad27f
-
Size
801KB
-
MD5
63bcd1ce7c80fcce5cf759fab6ad6a40
-
SHA1
00cacb92f9ec8c5f612015e9a6e12560957f8cc0
-
SHA256
b0ce906b5887876f27302971aaa4879fef2367848a36ce4a31e8f3914e3ad27f
-
SHA512
3b431e393511fce7454c3c2f2f3683f04d38d45aa6a6f2a79f0e5899ebe9fb83bacd0bd00be7111c202dca0a16a61a5fb985c5308ff2b3bb84873dbba98c8c0a
-
SSDEEP
24576:uhsPsjNItumBpThIVOhDGS1cb4ltuB04Y2TI6qtdm:6s0jNItZLThISGSe6t+Y28Tj
Malware Config
Signatures
Files
-
b0ce906b5887876f27302971aaa4879fef2367848a36ce4a31e8f3914e3ad27f.exe windows x86
d3de2302dea5f85ef9921a4cc1c6b59d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventW
TlsGetValue
DeviceIoControl
DeleteFileA
GetPrivateProfileSectionA
FindAtomA
DeviceIoControl
GetProcessVersion
GetProcessHeap
GetCurrentThread
CreateEventW
VirtualProtectEx
GetStringTypeW
lstrlenA
SetLastError
GetDriveTypeA
ResumeThread
LoadLibraryW
GetPrivateProfileIntW
HeapFree
SuspendThread
clbcatq
DllGetClassObject
SetSetupSave
SetupOpen
SetupOpen
SetSetupSave
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
SetupOpen
pdh
PdhCloseLog
PdhGetLogFileTypeA
PdhAddCounterA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ