Static task
static1
Behavioral task
behavioral1
Sample
525904d29af7261c471b7a2b89b3697e035cafb0c7e04dadebc07af00c6ca45f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
525904d29af7261c471b7a2b89b3697e035cafb0c7e04dadebc07af00c6ca45f.exe
Resource
win10v2004-20220812-en
General
-
Target
525904d29af7261c471b7a2b89b3697e035cafb0c7e04dadebc07af00c6ca45f
-
Size
124KB
-
MD5
572656bcaf7b4eb052ca549731992578
-
SHA1
da4662c2518c24a9bff6792a28ae132b6f038a3c
-
SHA256
525904d29af7261c471b7a2b89b3697e035cafb0c7e04dadebc07af00c6ca45f
-
SHA512
1b4a16a792f05896ceafa6e45e1f283caf78d78cc61df58ec9739142f3e99692266df3c8dc353d9dfa9461db64157e9a2d87095f684d88de41b0ba0876239ae8
-
SSDEEP
3072:9eIa4bB2+4fGdQSJ7TMDz0MURvCN2eV3INrm:sIfBD4+dRFQ1Ut+VYrm
Malware Config
Signatures
Files
-
525904d29af7261c471b7a2b89b3697e035cafb0c7e04dadebc07af00c6ca45f.exe windows x86
ee8f0ed6b7b65020bf5b41470832ed44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
CloseHandle
ReadConsoleA
GetStringTypeW
GetDriveTypeA
FindAtomW
ReadConsoleA
VirtualProtect
GetLogicalDrives
HeapFree
LoadLibraryW
GetStartupInfoA
GetPrivateProfileSectionA
GetVolumePathNameW
ReadConsoleA
PulseEvent
GetLastError
DeleteFileW
Sleep
ReleaseMutex
lstrlenA
clbcatq
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
SetupOpen
ComPlusMigrate
DllGetClassObject
SetupOpen
CheckMemoryGates
gpedit
DllGetClassObject
ExportRSoPData
BrowseForGPO
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE