Static task
static1
Behavioral task
behavioral1
Sample
b197dca39a0d26c85a1e5cf30d0bf66d1145fa8ab39efbe87c10b03704d5f938.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b197dca39a0d26c85a1e5cf30d0bf66d1145fa8ab39efbe87c10b03704d5f938.exe
Resource
win10v2004-20220812-en
General
-
Target
b197dca39a0d26c85a1e5cf30d0bf66d1145fa8ab39efbe87c10b03704d5f938
-
Size
81KB
-
MD5
6b26789a698e271b897758dca4ed84e0
-
SHA1
4ebb9d580407046677834672ab721a6d12914b46
-
SHA256
b197dca39a0d26c85a1e5cf30d0bf66d1145fa8ab39efbe87c10b03704d5f938
-
SHA512
22bedabf2a19438429d781c7e844761c1123fd35af53840a7872ed11358a3c56b78c219ea587982321fbabed4e2e39c26ce82543b9d2e243f2e082ffe49239f2
-
SSDEEP
1536:Fq5Utgs/TEAWxRUGxoqAdwaywIbUUlitQpk5kq6XOrEixNgY:F40gAWf9O9dw3wIzi6kvgY
Malware Config
Signatures
Files
-
b197dca39a0d26c85a1e5cf30d0bf66d1145fa8ab39efbe87c10b03704d5f938.exe windows x86
58575417d4be7d17782be004dc157a66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVolumePathNameA
SetLastError
TlsGetValue
lstrlenA
CreateEventW
GetDriveTypeA
GetStartupInfoA
GetProcessHeap
GetProcessVersion
ResumeThread
HeapFree
GetPrivateProfileSectionA
GetStringTypeW
CreateEventW
CreateEventW
FindAtomW
DeleteFileA
SuspendThread
LoadLibraryW
GetCurrentThread
VirtualProtect
clbcatq
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetupOpen
SetupOpen
ComPlusMigrate
gpedit
DllGetClassObject
ExportRSoPData
BrowseForGPO
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ