Static task
static1
Behavioral task
behavioral1
Sample
554e70596f923b5edecd5b57530373eca1370ef35f98e89633345124d98d4b31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
554e70596f923b5edecd5b57530373eca1370ef35f98e89633345124d98d4b31.exe
Resource
win10v2004-20220901-en
General
-
Target
554e70596f923b5edecd5b57530373eca1370ef35f98e89633345124d98d4b31
-
Size
118KB
-
MD5
8433c90aeb54b28fa8f13e84f5bec780
-
SHA1
00d265ad9b626a59933e3457680127d42391d6f2
-
SHA256
554e70596f923b5edecd5b57530373eca1370ef35f98e89633345124d98d4b31
-
SHA512
88be7320af4126fc09592384f981df5dfe7cd09430dfaf91ba1c8f659970a5b486a78377bcc53b5a9e4f655d5c1ac03a73787a08fd48107c9a4317ec1aed189b
-
SSDEEP
1536:vU3ttdoyzwzmHvOsZfmPta8EXzKqQT1A3tgKKFOYJTUPPJH1FTH2r8tTyuDgY:vmtJ3HGSfmPtaxXxpKgwatTH2YlPDgY
Malware Config
Signatures
Files
-
554e70596f923b5edecd5b57530373eca1370ef35f98e89633345124d98d4b31.exe windows x86
69e59c73cbe30f682f4b00825c9d7e4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetVolumePathNameA
GetProcessHeap
SetLastError
GetCurrentThread
GetProcessVersion
CreateEventW
LoadLibraryW
SuspendThread
ResumeThread
CreateEventW
GetDriveTypeA
CreateEventW
FindAtomA
GetPrivateProfileIntW
lstrlenA
TlsGetValue
GetStringTypeW
DeleteFileA
GetPrivateProfileSectionA
VirtualProtect
clbcatq
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen
DllGetClassObject
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
d3dramp
RampOldTri
g_RampOld_BeadTbl
g_RampOld_BeadTbl
RampOldTri
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE