Static task
static1
Behavioral task
behavioral1
Sample
356a1220622c305c232277be81440c529758d7fb1a978dada0b43a780ef90c94.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
356a1220622c305c232277be81440c529758d7fb1a978dada0b43a780ef90c94.exe
Resource
win10v2004-20220901-en
General
-
Target
356a1220622c305c232277be81440c529758d7fb1a978dada0b43a780ef90c94
-
Size
79KB
-
MD5
77aec27cc29cb0ecdc2470d643b8a150
-
SHA1
98988d16337fc05930b2516631c496578359d532
-
SHA256
356a1220622c305c232277be81440c529758d7fb1a978dada0b43a780ef90c94
-
SHA512
29587b3294910ca3408f0b9238ee28eea543a029583cf1ef9cad9e8746020119f68c61ac5d7ba956a06f459d9b95f63f83ed3d36eeebc2b80e1b9051a086c527
-
SSDEEP
1536:BJlH5WPdkz/I1vPaOOFX4olspn+EDjb2gtuVM0h:BL5WPqCvPaZX4wEXigtQjh
Malware Config
Signatures
Files
-
356a1220622c305c232277be81440c529758d7fb1a978dada0b43a780ef90c94.exe windows x86
4d53e2dcff2503411f2feff2a7bb9cdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
LoadLibraryW
GetCurrentThread
CreateEventW
ResumeThread
GetStringTypeW
GetPrivateProfileIntW
GetVolumePathNameA
GetProcessVersion
GetDriveTypeA
FindAtomA
TlsGetValue
HeapFree
GetPrivateProfileSectionA
DeleteFileA
CreateEventW
CreateEventW
VirtualProtect
lstrlenA
GetProcessHeap
SuspendThread
clbcatq
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetupOpen
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
d3dramp
g_RampOld_BeadTbl
g_RampOld_BeadTbl
RampOldTri
RampOldTri
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE