Static task
static1
Behavioral task
behavioral1
Sample
1d11ab6eddf96f7b8326eb6a4d8a3f898ad7343cfc68e2fe2a18abf7845ae2be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d11ab6eddf96f7b8326eb6a4d8a3f898ad7343cfc68e2fe2a18abf7845ae2be.exe
Resource
win10v2004-20220812-en
General
-
Target
1d11ab6eddf96f7b8326eb6a4d8a3f898ad7343cfc68e2fe2a18abf7845ae2be
-
Size
800KB
-
MD5
62c61030f515b5d33abecb78aa2e7b30
-
SHA1
1608ad6d98af54878ecc973dc69c66ca4ba3a9b8
-
SHA256
1d11ab6eddf96f7b8326eb6a4d8a3f898ad7343cfc68e2fe2a18abf7845ae2be
-
SHA512
cf4e32020e09e0127ea67103a7f1e9d85d8d7f992f3c053a9e9e11ffaa4c35a0c0d1ddf85658620c79108ec0cdd8aa4d879047f05723790af64744d0d8c5295e
-
SSDEEP
12288:vpL+fgMFoWsqXKXlBuP8QQKlL05feG/9cQpiwWt2rQQ9fkKrtceFvc14Fr8Pd2fK:h6we90QQRfeGSQpVdfVBtvc14FodJR
Malware Config
Signatures
Files
-
1d11ab6eddf96f7b8326eb6a4d8a3f898ad7343cfc68e2fe2a18abf7845ae2be.exe windows x86
3c6388f0952716ed556ccdf84ac30f41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
CreateEventW
HeapFree
lstrlenA
CreateEventW
GetProcessVersion
CreateEventW
LoadLibraryW
GetCurrentThread
DeleteFileA
FindAtomA
VirtualProtect
SetLastError
GetPrivateProfileSectionA
GetDriveTypeA
ResumeThread
SuspendThread
CreateMailslotA
GetProcessHeap
GetPrivateProfileIntW
GetStringTypeW
clbcatq
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
SetupOpen
SetupOpen
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
SetupOpen
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE