Static task
static1
Behavioral task
behavioral1
Sample
402e5924d88392df8cd917c7463b76d1f0d9aca543a50aa727ac3290deb7e900.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
402e5924d88392df8cd917c7463b76d1f0d9aca543a50aa727ac3290deb7e900.exe
Resource
win10v2004-20220812-en
General
-
Target
402e5924d88392df8cd917c7463b76d1f0d9aca543a50aa727ac3290deb7e900
-
Size
61KB
-
MD5
69e88fb3a276794044191859cf7cd530
-
SHA1
ebdbcffa382bf312ac81699febe30821d9214180
-
SHA256
402e5924d88392df8cd917c7463b76d1f0d9aca543a50aa727ac3290deb7e900
-
SHA512
3e625e1d96bf819a8f2ed1e88be39da0b0594dd55eae6ecb4559bd54a526a30df109eba2d0cd7480d0f60d47d0f8f66d4a518649b13a8bbe7777aa463e4872b1
-
SSDEEP
1536:4VFB2y6uVcH0TgkTAwKeqXIR/Sl8B3AtTVGUbmU3Bt7I:Hy6uq8HsbXIRaaUJGUyU3Bt7I
Malware Config
Signatures
Files
-
402e5924d88392df8cd917c7463b76d1f0d9aca543a50aa727ac3290deb7e900.exe windows x86
79c89bebd67d41a3ba3a8e3436317721
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetEndOfFile
GetDriveTypeW
CloseHandle
WriteFile
RemoveDirectoryA
FindClose
WaitForMultipleObjects
GetCommandLineA
IsBadWritePtr
HeapFree
RemoveDirectoryA
ExitThread
DeleteAtom
CreateSemaphoreW
GetModuleFileNameA
GetModuleHandleA
AddAtomA
SetVolumeLabelA
CreateDirectoryA
GetFileType
HeapCreate
FindAtomA
CreatePipe
ClearCommBreak
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE