Static task
static1
Behavioral task
behavioral1
Sample
195389387f0fe3fe37bb059e613652524432cc52e764ffc9a726e0b0b52a50dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
195389387f0fe3fe37bb059e613652524432cc52e764ffc9a726e0b0b52a50dc.exe
Resource
win10v2004-20220812-en
General
-
Target
195389387f0fe3fe37bb059e613652524432cc52e764ffc9a726e0b0b52a50dc
-
Size
815KB
-
MD5
6fd8d47c2381d60c0aab05e429f52806
-
SHA1
4bfef052a456d3998279a547750bb164b3f085f3
-
SHA256
195389387f0fe3fe37bb059e613652524432cc52e764ffc9a726e0b0b52a50dc
-
SHA512
f541ee6793f7d0144bf10a372f978d473ba9a1c551967f3ad48e5d7d8081134f51896193188af9ff674af595ed6c615642090359b1b2dc3564dc4a2cea611992
-
SSDEEP
24576:Hn/JNGdtiY11WsIfN/DM+u81DnZdh9maFimzPEXOV:Hn/JNGHpifNO81BimzsXG
Malware Config
Signatures
Files
-
195389387f0fe3fe37bb059e613652524432cc52e764ffc9a726e0b0b52a50dc.exe windows x86
b8433e003b746fdbde582b7f02a6b633
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCurrentProcess
VirtualAlloc
FormatMessageA
lstrcatA
SetEnvironmentVariableW
ReadConsoleW
SetCurrentDirectoryA
RemoveDirectoryA
GetStringTypeA
GetModuleHandleA
GetFileType
GetDiskFreeSpaceA
FindFirstVolumeW
GetPrivateProfileIntW
LeaveCriticalSection
GetComputerNameW
GetFullPathNameW
InterlockedExchange
catsrv
CreateComponentLibraryTS
DllGetClassObject
OpenComponentLibraryTS
GetCatalogCRMClerk
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TEXT Size: 802KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ