Static task
static1
Behavioral task
behavioral1
Sample
b3cbf8817e542c5c7436628505f9c894312a6f17fcfde85ec2f3610fa12a472b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b3cbf8817e542c5c7436628505f9c894312a6f17fcfde85ec2f3610fa12a472b.exe
Resource
win10v2004-20220901-en
General
-
Target
b3cbf8817e542c5c7436628505f9c894312a6f17fcfde85ec2f3610fa12a472b
-
Size
311KB
-
MD5
a0f30f62f49e920ea4166a135109bc90
-
SHA1
4888b3b29252ab99a76707145c4857ba5f326a02
-
SHA256
b3cbf8817e542c5c7436628505f9c894312a6f17fcfde85ec2f3610fa12a472b
-
SHA512
2273884e2673c97c25d5cc225f36805fb9f5402b8452caa77e3385831b5ce4762964e3321d0e9ac630c77a8b41234ab2a7fbd25c9e20711632e54ac07967dffd
-
SSDEEP
6144:hF+5TxRhcEjea9RFDRLgVlleO4lcr5DoZSR9/MFWFZRMnq508KvEg:hFWThc7a3Ft0VlV4aDoZ2VMFWFwq5mEg
Malware Config
Signatures
Files
-
b3cbf8817e542c5c7436628505f9c894312a6f17fcfde85ec2f3610fa12a472b.exe windows x86
83cfc70a942574b74667cb48f397df28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindAtomA
CreateEventW
GetPrivateProfileIntW
GetProcessVersion
TlsGetValue
GetVolumePathNameA
GetDriveTypeA
GetProcessHeap
SetLastError
HeapFree
GetPrivateProfileSectionA
GetCurrentThread
CreateEventW
SuspendThread
ResumeThread
GetStringTypeW
lstrlenA
CreateEventW
DeleteFileA
VirtualProtect
LoadLibraryW
clbcatq
ComPlusMigrate
SetupOpen
DllGetClassObject
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE