Static task
static1
Behavioral task
behavioral1
Sample
144fb685fcfd210e92be8baad9b95f7dc128e5b01eb1f166fa5c3a7373a216bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
144fb685fcfd210e92be8baad9b95f7dc128e5b01eb1f166fa5c3a7373a216bf.exe
Resource
win10v2004-20220812-en
General
-
Target
144fb685fcfd210e92be8baad9b95f7dc128e5b01eb1f166fa5c3a7373a216bf
-
Size
308KB
-
MD5
969a937d3b024d6fa0f63f2b44573230
-
SHA1
883e88293d74905639394e06a672375ac27d5ea2
-
SHA256
144fb685fcfd210e92be8baad9b95f7dc128e5b01eb1f166fa5c3a7373a216bf
-
SHA512
e7410efe32c3a52129e2665555ea115485b3215e83e25cafb28f75a1d200f2396137d0a8425ac608b756c3529896c59a523502ac67a9f81473d4bcd3efac369c
-
SSDEEP
6144:VN91FRjPDcMLgT6aV141prTbW2lJcFyuWcM4Ssd:VN9pPoqmZC5TbWwJcFyVcS
Malware Config
Signatures
Files
-
144fb685fcfd210e92be8baad9b95f7dc128e5b01eb1f166fa5c3a7373a216bf.exe windows x86
d2d0519463d8edadf90c4ca61e007e77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeW
HeapDestroy
lstrlenA
SetLastError
DeleteFileA
GetCurrentThread
ResumeThread
GetDriveTypeA
TlsGetValue
GetFileAttributesW
CreateEventW
VirtualProtectEx
ClearCommBreak
HeapFree
GetPrivateProfileSectionA
CreateMutexW
DeviceIoControl
GetPrivateProfileIntW
DeviceIoControl
GetProcessHeap
LoadLibraryW
clbcatq
SetSetupSave
DllGetClassObject
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
SetupOpen
SetupOpen
ComPlusMigrate
SetupOpen
SetSetupSave
ComPlusMigrate
CheckMemoryGates
pdh
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ