Static task
static1
Behavioral task
behavioral1
Sample
d5be3eecf2fbc2e4094c688f0fb2c23c5c3a1a51e2608d11a1bbe9747592a7ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5be3eecf2fbc2e4094c688f0fb2c23c5c3a1a51e2608d11a1bbe9747592a7ef.exe
Resource
win10v2004-20220812-en
General
-
Target
d5be3eecf2fbc2e4094c688f0fb2c23c5c3a1a51e2608d11a1bbe9747592a7ef
-
Size
73KB
-
MD5
6e4a7ee88a587f504e8ab6aef423b250
-
SHA1
74e6c8f3378b60c4fc00a35f861f2efb1a692baa
-
SHA256
d5be3eecf2fbc2e4094c688f0fb2c23c5c3a1a51e2608d11a1bbe9747592a7ef
-
SHA512
bb71386e3adc55e8ce12c2bf0ed10702181ba0d556606f35e522d50e3fb6a88d5067b077b1b59cc5bd89054a73ddaab5a2e2a190d765ca2d4a2e02439054b426
-
SSDEEP
1536:KHamI4yJnxmm14gVE2KBaApRcy4gE+JBM4p:KynJnxR4YE2KsApRB4gBnM4
Malware Config
Signatures
Files
-
d5be3eecf2fbc2e4094c688f0fb2c23c5c3a1a51e2608d11a1bbe9747592a7ef.exe windows x86
061e404a437338d1e55e50b9eb4e2c21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
HeapFree
CreateEventW
FindAtomA
LoadLibraryW
DeleteFileA
GetStringTypeW
SetLastError
TlsGetValue
lstrlenA
GetProcessHeap
GetDriveTypeA
GetPrivateProfileSectionA
GetPrivateProfileIntW
GetCurrentThread
CreateEventA
SuspendThread
GetProcessVersion
ResumeThread
DeviceIoControl
VirtualProtectEx
clbcatq
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetSetupSave
DllGetClassObject
SetupOpen
SetupOpen
CheckMemoryGates
SetSetupSave
pdh
PdhAddCounterA
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ