Static task
static1
Behavioral task
behavioral1
Sample
a4590635b3a51c2260ae44cc43b5da5ffe2fbd62f2090b04be3c5c63591d5959.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4590635b3a51c2260ae44cc43b5da5ffe2fbd62f2090b04be3c5c63591d5959.exe
Resource
win10v2004-20220901-en
General
-
Target
a4590635b3a51c2260ae44cc43b5da5ffe2fbd62f2090b04be3c5c63591d5959
-
Size
777KB
-
MD5
7b18abf744e104cd88e3c5427e13d300
-
SHA1
bf1387a07de7f3524f198cbb0ccf747863671247
-
SHA256
a4590635b3a51c2260ae44cc43b5da5ffe2fbd62f2090b04be3c5c63591d5959
-
SHA512
020b994352443f10b8507b5fcdfeb8b160c062d783b1d3ab7cc1023c006d2564ef74d5115f01462c86a9dec2274e88d1935e413fa64f5158ebf681889a7982b8
-
SSDEEP
12288:N4Vy0YsrwcsQo1rpbYidmGxv25GRZFkURZqDIIFG5FR0mulEWFrmlUQ:N4V9mtlpbY18brTRZXIFG5D0mulfE
Malware Config
Signatures
Files
-
a4590635b3a51c2260ae44cc43b5da5ffe2fbd62f2090b04be3c5c63591d5959.exe windows x86
8c86dbc342816e19c244c7bec9abf72d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetStartupInfoA
WriteConsoleW
CreateMutexA
CloseHandle
lstrcpyW
WriteConsoleW
FormatMessageA
lstrlenW
GetFileSize
HeapCreate
GetFileAttributesA
GetFileTime
ReleaseMutex
FindResourceA
GetCurrentDirectoryA
IsBadStringPtrA
ReadFile
IsValidLocale
WriteConsoleW
GetModuleHandleA
msi
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA
MsiCreateRecord
clbcatq
CheckMemoryGates
SetupOpen
SetSetupSave
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
SetupOpen
CheckMemoryGates
DllGetClassObject
SetSetupSave
CheckMemoryGates
SetupOpen
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE