Static task
static1
Behavioral task
behavioral1
Sample
e3843c43c6b2c9790287763512a5c08d320583585431a514a9ba94c8db782567.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3843c43c6b2c9790287763512a5c08d320583585431a514a9ba94c8db782567.exe
Resource
win10v2004-20220812-en
General
-
Target
e3843c43c6b2c9790287763512a5c08d320583585431a514a9ba94c8db782567
-
Size
311KB
-
MD5
92013740c3e1477ef2a3991a0e4adbb0
-
SHA1
fad5bb92408edf67c01677665964ebd0470a7342
-
SHA256
e3843c43c6b2c9790287763512a5c08d320583585431a514a9ba94c8db782567
-
SHA512
58ea8263f8f3e037319b5e6b447963d1cf80b51a9327a6a41e6f0c9055f255a6c24f6d26f4935a2df02a27d447d3c562f50f2d9c6cfb94d34fee051bdeab734e
-
SSDEEP
6144:tZLtB0sZtDOXXWnyD9IqcMvrERyrmAdsaCKiKHU0j6Ss2ESYb:rLT0sXDOWyD9VvrEOGaCKiulsb
Malware Config
Signatures
Files
-
e3843c43c6b2c9790287763512a5c08d320583585431a514a9ba94c8db782567.exe windows x86
9bc61b0657a44e5a9d9c8a57a615b976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeA
GetProcessVersion
CreateEventW
DeleteFileA
FindAtomA
DeviceIoControl
DeviceIoControl
SuspendThread
TlsGetValue
HeapFree
ResumeThread
CreateEventW
lstrlenA
GetPrivateProfileIntW
GetProcessHeap
VirtualProtectEx
GetPrivateProfileSectionA
LoadLibraryW
SetLastError
GetStringTypeW
GetCurrentThread
clbcatq
SetupOpen
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
SetSetupSave
CheckMemoryGates
CheckMemoryGates
SetSetupSave
SetupOpen
SetupOpen
DllGetClassObject
CheckMemoryGates
pdh
PdhCloseLog
PdhGetLogFileTypeA
PdhAddCounterA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ