Static task
static1
Behavioral task
behavioral1
Sample
db23f89e25ce7d53967d621a178dcd5f2f958a3fe28f254550dca228676d91cb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db23f89e25ce7d53967d621a178dcd5f2f958a3fe28f254550dca228676d91cb.exe
Resource
win10v2004-20220812-en
General
-
Target
db23f89e25ce7d53967d621a178dcd5f2f958a3fe28f254550dca228676d91cb
-
Size
73KB
-
MD5
527ecee55e206fd82dc5cafd16aa4a30
-
SHA1
dbc90daf692ee16c12e0ca7aef93efef5f0f0a74
-
SHA256
db23f89e25ce7d53967d621a178dcd5f2f958a3fe28f254550dca228676d91cb
-
SHA512
ebcb9608eac4e45efee3e8b746b0be6fb43e2db59e5487c7c780ae40e9a2431b88172676948dc754affe111c7eb7181b17f7e1f64be8cb31bd83ccc58bf362d1
-
SSDEEP
1536:rttg65kGbsYozElM2W4vtrO5XDTc9XkCbjQb4p:rY65kOFfdO5DT0Hw4
Malware Config
Signatures
Files
-
db23f89e25ce7d53967d621a178dcd5f2f958a3fe28f254550dca228676d91cb.exe windows x86
46419677f66aad0b2df59f99cc8e142f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
GetPrivateProfileSectionA
lstrlenA
FindAtomA
GetProcessHeap
GetProcessVersion
GetCurrentThread
SuspendThread
ResumeThread
DeviceIoControl
CreateEventW
GetDriveTypeA
TlsGetValue
DeviceIoControl
GetStringTypeW
DeleteFileA
HeapFree
VirtualProtectEx
CreateEventA
SetLastError
GetPrivateProfileIntW
clbcatq
SetSetupSave
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
SetupOpen
SetSetupSave
SetupOpen
DllGetClassObject
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ