Static task
static1
Behavioral task
behavioral1
Sample
75013b32c7d5f865063340569465314c8c98fe28a8e46f9e016d2baac39be725.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75013b32c7d5f865063340569465314c8c98fe28a8e46f9e016d2baac39be725.exe
Resource
win10v2004-20220812-en
General
-
Target
75013b32c7d5f865063340569465314c8c98fe28a8e46f9e016d2baac39be725
-
Size
213KB
-
MD5
027e6f0e58c317f03f22cbd45966da38
-
SHA1
d42e3e7b5242e685e6d3d1bd5eec7d76e06beff0
-
SHA256
75013b32c7d5f865063340569465314c8c98fe28a8e46f9e016d2baac39be725
-
SHA512
31f9f2e9a1d73427e95eb7520a051622c9a3ae0acecd8fae6ba41c00349bb64abad04a9027a5a1cf50c789f1060a6be664262792072507c10b396d6e186d9c4c
-
SSDEEP
3072:oZWp7RO+LewW/Ht3EZesxGynX5yJxKgO0rkYbt1bbnJuZeK5b4baD7eNkaB:ldO+LekZes4yX5y+D0Qgj2rMO8
Malware Config
Signatures
Files
-
75013b32c7d5f865063340569465314c8c98fe28a8e46f9e016d2baac39be725.exe windows x86
1cc13a0445f76e38f13ecdb888d063d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
quartz
AmpFactorToDB
DllGetClassObject
DllRegisterServer
AMGetErrorTextW
DllUnregisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextA
kernel32
GetCurrentProcess
lstrcmpA
SystemTimeToFileTime
LoadLibraryW
GetProcessHeap
lstrlenA
GetOEMCP
HeapAlloc
GetTickCount
lstrcpyA
GetCurrentProcessId
LoadResource
GetSystemTimeAsFileTime
GetSystemDefaultLCID
FreeResource
HeapFree
GetEnvironmentStringsW
WideCharToMultiByte
SetLastError
SetUnhandledExceptionFilter
GetUserDefaultLCID
QueryPerformanceCounter
MultiByteToWideChar
GetVolumeInformationA
CreateFileA
QueryDosDeviceA
DeviceIoControl
GetLocaleInfoW
CloseHandle
LockResource
FindResourceA
GetLocalTime
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
user32
wsprintfA
CharNextA
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ