Static task
static1
Behavioral task
behavioral1
Sample
c763b9f16fdc4e9b7b413f951d79a2f700713321207691774ddcea7302b4f3ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c763b9f16fdc4e9b7b413f951d79a2f700713321207691774ddcea7302b4f3ed.exe
Resource
win10v2004-20220812-en
General
-
Target
c763b9f16fdc4e9b7b413f951d79a2f700713321207691774ddcea7302b4f3ed
-
Size
311KB
-
MD5
5ead728317e11d132d7503f24dcb9150
-
SHA1
0031582f61c7180da7300403bc3a800710a83d8f
-
SHA256
c763b9f16fdc4e9b7b413f951d79a2f700713321207691774ddcea7302b4f3ed
-
SHA512
7a11032c0a52c02c2d2e8bc15081889b33959e9934ccc063bf8bdaaaeef4c89765d7a6db93b411bdd2888ab4fafb48131c5f2bf8093a999b2179a1d5c479ccc0
-
SSDEEP
6144:uv/5jqIKV2VCI86IwiXJtGbjB1qFMCpd4TNcYk+jv8IIrOveH:1IKV20iIrH+jGFTwBchtIIoE
Malware Config
Signatures
Files
-
c763b9f16fdc4e9b7b413f951d79a2f700713321207691774ddcea7302b4f3ed.exe windows x86
cdd127eed5ad66ac9111757b39410bdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntW
lstrlenA
TlsGetValue
GetCurrentThread
GetDriveTypeA
SuspendThread
DeviceIoControl
HeapFree
FindAtomA
DeviceIoControl
ResumeThread
GetPrivateProfileSectionA
CreateEventW
GetProcessHeap
LoadLibraryW
GetProcessVersion
CreateEventA
SetLastError
GetStringTypeW
DeleteFileA
VirtualProtectEx
clbcatq
ComPlusMigrate
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetSetupSave
CheckMemoryGates
DllGetClassObject
DllGetClassObject
SetSetupSave
CheckMemoryGates
SetupOpen
SetupOpen
ComPlusMigrate
pdh
PdhGetLogFileSize
PdhCloseLog
PdhAddCounterA
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ