Static task
static1
Behavioral task
behavioral1
Sample
929f7f3f901c78a9bca57bd3cdeece9f4021fb168af9ada0c3da008eca855440.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
929f7f3f901c78a9bca57bd3cdeece9f4021fb168af9ada0c3da008eca855440.exe
Resource
win10v2004-20220812-en
General
-
Target
929f7f3f901c78a9bca57bd3cdeece9f4021fb168af9ada0c3da008eca855440
-
Size
748KB
-
MD5
010e7336b3be16bdd894ac92debd0de5
-
SHA1
4e74268d15901e158415fabde28428bda188d654
-
SHA256
929f7f3f901c78a9bca57bd3cdeece9f4021fb168af9ada0c3da008eca855440
-
SHA512
836409156a97cff33315b726c48b845202fbca16b576dd0582c95cef32e1dc99727c9ed2a273700fbcd68b9544871c8f5034ab504d40632407d036e3ebe031ae
-
SSDEEP
12288:4xzix3s8m8j+M/ubsLIUeUTvFJxtQMhIbQpMQxN3y4StMqxKNnne7M3sdWU6+OoL:0ihs8m8SM/gsLSUTvF/tFhYwN3y4sKlb
Malware Config
Signatures
Files
-
929f7f3f901c78a9bca57bd3cdeece9f4021fb168af9ada0c3da008eca855440.exe windows x86
0d8ec9fac2978de9e13842b1316aae1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitThread
CreateDirectoryA
FindClose
CloseHandle
FindAtomA
GetModuleFileNameA
AddAtomW
SetVolumeLabelA
HeapCreate
GetTapeStatus
GetCommandLineA
HeapFree
GetFileType
CreateSemaphoreW
DeleteAtom
IsBadWritePtr
WriteFile
RemoveDirectoryA
SetEndOfFile
WaitForMultipleObjects
RemoveDirectoryA
CreatePipe
GetVersion
GetDriveTypeA
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
odbcbcp
bcp_bind
bcp_bind
bcp_bind
bcp_bind
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE