Static task
static1
Behavioral task
behavioral1
Sample
52ccf9539e13cca67d06dcbda0b6a8cf2b9edbfba84f7ffe03bf8861c5c64f01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52ccf9539e13cca67d06dcbda0b6a8cf2b9edbfba84f7ffe03bf8861c5c64f01.exe
Resource
win10v2004-20220812-en
General
-
Target
52ccf9539e13cca67d06dcbda0b6a8cf2b9edbfba84f7ffe03bf8861c5c64f01
-
Size
310KB
-
MD5
64c28d888879fdf16bcf1796434fee60
-
SHA1
028402cba04e7683e1b1902e3931fc83bba4609a
-
SHA256
52ccf9539e13cca67d06dcbda0b6a8cf2b9edbfba84f7ffe03bf8861c5c64f01
-
SHA512
e25a89a6dd418c3607110071498cbbf8ba4db2796244df08332c9d9eb5ead97de47a6df385c59146b23dccee5a71ac5e2d6398d8d554203110b847aad6cd77af
-
SSDEEP
6144:pd2NBSwDYt4AxswTAk/7QuaAXhZL6584UYwUKZo0oo03+/+d:pGB3DqdxXT5ckK58zrTX2
Malware Config
Signatures
Files
-
52ccf9539e13cca67d06dcbda0b6a8cf2b9edbfba84f7ffe03bf8861c5c64f01.exe windows x86
906ab8776dcbabe78f87356ec5c6befa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResumeThread
GetPrivateProfileIntW
lstrlenA
GetCurrentThread
CreateEventW
GetDriveTypeA
GetStringTypeW
DeleteFileA
VirtualProtect
GetProcessHeap
FindAtomA
GetVolumePathNameA
HeapFree
CreateEventW
LoadLibraryW
TlsGetValue
SetLastError
CreateEventW
GetPrivateProfileSectionA
GetProcessVersion
SuspendThread
clbcatq
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
DllGetClassObject
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen
ComPlusMigrate
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE