Static task
static1
Behavioral task
behavioral1
Sample
d578c531e80e05e03a3da75c1a70675e29bbfcf36a2be55561593d8ce2800722.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d578c531e80e05e03a3da75c1a70675e29bbfcf36a2be55561593d8ce2800722.exe
Resource
win10v2004-20220812-en
General
-
Target
d578c531e80e05e03a3da75c1a70675e29bbfcf36a2be55561593d8ce2800722
-
Size
310KB
-
MD5
68ed63974b1be6376e40207ed9a11650
-
SHA1
3e03cf80b07ab3a6fc1eafd97d84344dc95aebaa
-
SHA256
d578c531e80e05e03a3da75c1a70675e29bbfcf36a2be55561593d8ce2800722
-
SHA512
0f4a4711cc02ea601a9674b958dd08f9d97229c8a0a32e7ada599c2a2b3db5fdcf4679135357110bb38eea58debaba35d1b260972e7b2f824167e4e6a3c37175
-
SSDEEP
6144:3j9d2NBSwf4fklMqrSvhgSbYUWsJq9lMMB/sIxN7zRECfYwkYIfovqVZr+J:z9GBTvi1WSosJq9lb/sIxN71Yf/Zrw
Malware Config
Signatures
Files
-
d578c531e80e05e03a3da75c1a70675e29bbfcf36a2be55561593d8ce2800722.exe windows x86
efe594338b1b7dff88118e0fc7973bcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
GetStringTypeW
DeleteFileA
GetProcessHeap
CreateEventW
GetDriveTypeA
LoadLibraryW
GetPrivateProfileIntW
ResumeThread
SetLastError
CreateMailslotA
SuspendThread
TlsGetValue
CreateEventW
FindAtomA
GetPrivateProfileSectionA
GetProcessVersion
VirtualProtect
HeapFree
CreateEventW
GetCurrentThread
clbcatq
SetupOpen
SetupOpen
ComPlusMigrate
DllGetClassObject
SetupOpen
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
d3dramp
g_RampOld_BeadTbl
g_RampOld_BeadTbl
RampOldTri
RampOldTri
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE