Static task
static1
Behavioral task
behavioral1
Sample
5c916db699e07d7d1dd8bee1a79cd81b8cf0cee651655db524574fd914dc73ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c916db699e07d7d1dd8bee1a79cd81b8cf0cee651655db524574fd914dc73ca.exe
Resource
win10v2004-20220901-en
General
-
Target
5c916db699e07d7d1dd8bee1a79cd81b8cf0cee651655db524574fd914dc73ca
-
Size
310KB
-
MD5
769abca265256749a01818dd28d4ccc0
-
SHA1
2c0a4ceb3047c7f1bee4c635a06a77a9c6e155a7
-
SHA256
5c916db699e07d7d1dd8bee1a79cd81b8cf0cee651655db524574fd914dc73ca
-
SHA512
f0d7833a2818e37c7fe5a732156f0314580f4a4d1763654a5a3374f97dad1f05f9fc281c5f600cef02bef3a6fde3ea9f657437eeaf0fd524ccbe92862c6b7d97
-
SSDEEP
6144:md2NBSNiDgHG8f+/Ey09I6l/wreVfGMlnCrBhVND0S9bAToyei:mGBZkex61wresTb2Toji
Malware Config
Signatures
Files
-
5c916db699e07d7d1dd8bee1a79cd81b8cf0cee651655db524574fd914dc73ca.exe windows x86
daccd92e96b702b86ae515cb4af90ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
HeapFree
DeleteFileA
ResumeThread
GetDriveTypeA
FindAtomA
CreateEventW
GetProcessHeap
VirtualProtect
CreateEventW
TlsGetValue
GetProcessVersion
GetPrivateProfileIntW
SetLastError
CreateEventW
LoadLibraryW
GetStringTypeW
GetCurrentThread
CreateMailslotA
lstrlenA
SuspendThread
clbcatq
CheckMemoryGates
DllGetClassObject
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
SetupOpen
d3dramp
g_RampOld_BeadTbl
g_RampOld_BeadTbl
RampOldTri
RampOldTri
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE