Static task
static1
Behavioral task
behavioral1
Sample
c6e424b3e414be5b55b92102411d1c21562aa7d9e17076db37ee6c5d4c011b10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6e424b3e414be5b55b92102411d1c21562aa7d9e17076db37ee6c5d4c011b10.exe
Resource
win10v2004-20220812-en
General
-
Target
c6e424b3e414be5b55b92102411d1c21562aa7d9e17076db37ee6c5d4c011b10
-
Size
800KB
-
MD5
4ff49f8b07fb327519a51b08bee457b0
-
SHA1
a6ecebc91472e84f55819f522f693a94607366f4
-
SHA256
c6e424b3e414be5b55b92102411d1c21562aa7d9e17076db37ee6c5d4c011b10
-
SHA512
e14a666714b486a1f32951430154e849e35389243e9e6bca32d8b35321ff75aa55f20837230b40f51c915432ff6aaaf6c54ccf2f6eb25fb13189cc99913e84c5
-
SSDEEP
24576:m+CZ4PXJ8ddCmF4aKsGsmk3dFtKbw7MP:m+CMe1FgHk3dFt0XP
Malware Config
Signatures
Files
-
c6e424b3e414be5b55b92102411d1c21562aa7d9e17076db37ee6c5d4c011b10.exe windows x86
316ec5f6cf2ec4e65c8a9c1daf60c797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
CreateEventW
ClearCommBreak
GetStringTypeW
GetPrivateProfileSectionA
DeleteFileA
DeviceIoControl
GetPrivateProfileIntW
VirtualProtectEx
GetProcessHeap
GetCurrentThread
CreateMutexW
ResumeThread
SetLastError
DeviceIoControl
GetFileAttributesW
HeapDestroy
LoadLibraryW
GetDriveTypeA
lstrlenA
HeapFree
clbcatq
DllGetClassObject
SetupOpen
SetSetupSave
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetSetupSave
ComPlusMigrate
SetupOpen
ComPlusMigrate
pdh
PdhGetLogFileSize
PdhGetLogFileTypeA
PdhCloseLog
PdhAddCounterA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ