Static task
static1
Behavioral task
behavioral1
Sample
c2d732784faae46064d75399145080b527b4e6754886c7305c49349c0998ab43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2d732784faae46064d75399145080b527b4e6754886c7305c49349c0998ab43.exe
Resource
win10v2004-20220812-en
General
-
Target
c2d732784faae46064d75399145080b527b4e6754886c7305c49349c0998ab43
-
Size
44KB
-
MD5
af07d19a0ec16399555911a0b77db51e
-
SHA1
f89221176364f00bb1d24b651efb8140a25bd6b2
-
SHA256
c2d732784faae46064d75399145080b527b4e6754886c7305c49349c0998ab43
-
SHA512
099f771440d9191d285de706d9d66406355d92064b1cd40403367e8d69eed6854b47fb4a6917216961ae23b06001cd73179cd38a2f07f6698a46007dad99c24d
-
SSDEEP
768:4lf6JveozX13r4IXZGojmOY5JvW5JxVIAA3YjA7Sf3q:4V6JWi3Es5jmOwJvW5JvIAA3kA7Sf3q
Malware Config
Signatures
Files
-
c2d732784faae46064d75399145080b527b4e6754886c7305c49349c0998ab43.exe windows x86
9ec394606677b993a75d63be1c995b91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
olecli32
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
lz32
LZRead
LZOpenFileA
LZOpenFileW
LZStart
msdmo
DMORegister
mscat32
CryptCATCDFClose
CryptCATGetAttrInfo
CryptCATGetAttrInfo
CryptCATGetAttrInfo
kernel32
GetSystemDirectoryA
CreateFileA
TerminateThread
ReadFileEx
GetTickCount
GetTickCount
ReadConsoleW
devmgr
DeviceProblemTextA
esent
JetBeginSession
Sections
tex Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data3 Size: 4KB - Virtual size: 69KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plk Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neo Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE