Static task
static1
Behavioral task
behavioral1
Sample
c688515c0f95391c87a805a4f150027b68b17cd8d069f88b4f69712588a5af7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c688515c0f95391c87a805a4f150027b68b17cd8d069f88b4f69712588a5af7c.exe
Resource
win10v2004-20220812-en
General
-
Target
c688515c0f95391c87a805a4f150027b68b17cd8d069f88b4f69712588a5af7c
-
Size
272KB
-
MD5
6a24b7bffd806b6cce7dc412234e8160
-
SHA1
ba1280de2a04cb37de634952e42a3d4ceb895b3d
-
SHA256
c688515c0f95391c87a805a4f150027b68b17cd8d069f88b4f69712588a5af7c
-
SHA512
fc08567649824057767fa6643190510eeb2c2ead2baaa0752fbbf79a69d0e06ae6c79cac38676d18e0551b6f6b4504cefc27cae8414ad5a033fea79f8d320d59
-
SSDEEP
6144:eNEoB+RlUxsXmaCGDdmYymMfCzEtDbteI2TOZecoI/Px7oq:o1qCpm/zQftEdcziq
Malware Config
Signatures
Files
-
c688515c0f95391c87a805a4f150027b68b17cd8d069f88b4f69712588a5af7c.exe windows x86
d44cd03d82372a39e640d24abe26041d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
ResetEvent
GetDriveTypeA
LocalFree
HeapCreate
GetDateFormatA
FindVolumeClose
ResumeThread
LoadLibraryW
CreateFileA
CloseHandle
GetDiskFreeSpaceA
lstrlenA
LocalUnlock
GetCommandLineW
CreateThread
GetModuleHandleA
SetLastError
GetTickCount
GetSystemTime
advapi32
GetUserNameA
CloseEventLog
FreeSid
IsTokenUntrusted
RegEnumKeyExA
RegEnumValueA
GetLengthSid
RegCreateKeyExA
GetFileSecurityW
RegDeleteKeyA
CreateServiceA
RegCloseKey
RegQueryValueA
clbcatq
ComPlusMigrate
DllGetClassObject
SetupOpen
SetSetupSave
CheckMemoryGates
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ