Static task
static1
Behavioral task
behavioral1
Sample
f46dad53bafed10c04fc77903610ed22ce56bd8407fd16a89a79a4430ff680ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f46dad53bafed10c04fc77903610ed22ce56bd8407fd16a89a79a4430ff680ca.exe
Resource
win10v2004-20220812-en
General
-
Target
f46dad53bafed10c04fc77903610ed22ce56bd8407fd16a89a79a4430ff680ca
-
Size
72KB
-
MD5
58441c977082cb45e62d8459b011f030
-
SHA1
b8ecdfb8808ce0067a625129bc5d315531dea778
-
SHA256
f46dad53bafed10c04fc77903610ed22ce56bd8407fd16a89a79a4430ff680ca
-
SHA512
703a5ac18d764ad30eca3a5c941c6935f2dd9e882a25ae531a4cc1c10e58e0d17cd9e476c80a8cd499fb81b8534838c423c7e14e924fc9882a6871755d5eb2c0
-
SSDEEP
1536:JGPahMJfY9s4OYxBLAcZ3okTvj1H2rhGh4p:kPj74acZ3okTv0S4
Malware Config
Signatures
Files
-
f46dad53bafed10c04fc77903610ed22ce56bd8407fd16a89a79a4430ff680ca.exe windows x86
d5407a0da90ff8ff0e5be2e79da5438b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntW
CreateEventW
ResumeThread
DeviceIoControl
DeleteFileA
DeviceIoControl
GetPrivateProfileSectionA
HeapFree
ClearCommBreak
lstrlenA
HeapDestroy
SetLastError
GetStringTypeW
CreateEventA
TlsGetValue
LoadLibraryW
GetFileAttributesW
GetProcessHeap
GetDriveTypeA
VirtualProtectEx
GetCurrentThread
clbcatq
DllGetClassObject
SetupOpen
ComPlusMigrate
SetSetupSave
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetSetupSave
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
DllGetClassObject
pdh
PdhAddCounterA
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ