Static task
static1
Behavioral task
behavioral1
Sample
62369db10eebc64c205a4e6ee5fa105821142dc6ebf836c29c2c9e05d959379b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
62369db10eebc64c205a4e6ee5fa105821142dc6ebf836c29c2c9e05d959379b.exe
Resource
win10v2004-20220812-en
General
-
Target
62369db10eebc64c205a4e6ee5fa105821142dc6ebf836c29c2c9e05d959379b
-
Size
310KB
-
MD5
90df8ac4ffbee16bff097958017dbc00
-
SHA1
ef739c9e2152eaae7721fc3d8d1aac51e4251d93
-
SHA256
62369db10eebc64c205a4e6ee5fa105821142dc6ebf836c29c2c9e05d959379b
-
SHA512
29493330a44289030dbca1ce30110262f597cd79c5d1492162bd4e850b370087283ed30a7de6b1f8b7e79774d0f575d78b7c9c85260c7d9a48a49270909aeec6
-
SSDEEP
6144:7Cd2NBSN+M7G0337LI2yIfatGI6B9M8mz:7CGBUJ7G0337knvYh9M1z
Malware Config
Signatures
Files
-
62369db10eebc64c205a4e6ee5fa105821142dc6ebf836c29c2c9e05d959379b.exe windows x86
d4115821fe8b5359fa889a676dba85ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
VirtualProtect
DeleteFileA
GetPrivateProfileSectionA
GetProcessHeap
CreateMailslotA
ResumeThread
CreateEventW
CreateEventW
GetCurrentThread
TlsGetValue
SetLastError
GetPrivateProfileIntW
GetProcessVersion
LoadLibraryW
CreateEventW
GetStringTypeW
GetDriveTypeA
SuspendThread
FindAtomA
lstrlenA
clbcatq
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
SetupOpen
SetupOpen
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE