Static task
static1
Behavioral task
behavioral1
Sample
8992ce75735fce15aa797795fff88f57a3acd7537e806260a8b7911eaf4700ab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8992ce75735fce15aa797795fff88f57a3acd7537e806260a8b7911eaf4700ab.exe
Resource
win10v2004-20220812-en
General
-
Target
8992ce75735fce15aa797795fff88f57a3acd7537e806260a8b7911eaf4700ab
-
Size
56KB
-
MD5
4b6cb4e0ef1c755cf8958e2ee6eda450
-
SHA1
fd9fc61cf5c035188577c138b1165fcbf213d142
-
SHA256
8992ce75735fce15aa797795fff88f57a3acd7537e806260a8b7911eaf4700ab
-
SHA512
0315bee099ae794a24c0dbec96536e9f02b589026039dcbba49c8008cc10c1d0cdf1dfe930e726feeadedaa364766d0078de300350986ff5e48df7bfa4cd49cd
-
SSDEEP
768:peBtidMKAPnH5VeiOFCCl8uTNnREq2Pbbbb:pjMXVDVClJTNiVbbbb
Malware Config
Signatures
Files
-
8992ce75735fce15aa797795fff88f57a3acd7537e806260a8b7911eaf4700ab.exe windows x86
614ebf4dc1912015a4bb3f16d655ed3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
clusapi
CloseClusterGroup
CloseClusterNetInterface
CloseClusterNetwork
CloseClusterNotifyPort
CloseClusterResource
ClusterGetEnumCount
ClusterGroupCloseEnum
ClusterGroupControl
ClusterGroupEnum
icm32
CMCreateProfile
CMDeleteTransform
aclui
CreateSecurityPage
CreateSecurityPage
CreateSecurityPage
CreateSecurityPage
CreateSecurityPage
CreateSecurityPage
duser
DUserFindClass
DUserGetAlphaPRID
DUserGetGutsData
DUserGetRectPRID
DUserGetRotatePRID
DUserGetScalePRID
DUserRegisterGuts
DUserRegisterStub
DUserRegisterSuper
kernel32
CreateFileA
ReadFile
ExitProcess
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA
icmp
IcmpSendEcho
quartz
AMGetErrorTextA
raschap
RasEapCreateConnectionProperties
RasEapCreateUserProperties
RasEapCreateConnectionProperties
RasEapCreateUserProperties
esent
JetGetBookmark
JetGetColumnInfo
JetGetCounter
JetGetCurrentIndex
JetGetCursorInfo
JetGetDatabaseFileInfo
JetGetDatabaseInfo
JetGetIndexInfo
JetGetInstanceInfo
Sections
.text2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 11KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rSRC Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ