Static task
static1
Behavioral task
behavioral1
Sample
23e296ab01069368a4487be080d601e54cbdd121c6e2575d5f3ff3740aebaff2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23e296ab01069368a4487be080d601e54cbdd121c6e2575d5f3ff3740aebaff2.exe
Resource
win10v2004-20220812-en
General
-
Target
23e296ab01069368a4487be080d601e54cbdd121c6e2575d5f3ff3740aebaff2
-
Size
768KB
-
MD5
0f4fc4df7690756a1bd319651efb3a1c
-
SHA1
92f0b6e94bdcb382b061de9184c0658884a5be95
-
SHA256
23e296ab01069368a4487be080d601e54cbdd121c6e2575d5f3ff3740aebaff2
-
SHA512
2e60926d4f1574ce01fce16854758d356086d2b87ea8d5c0c33265d8b27d92e9ce2373f3a84fe8685902b5671a2ab60c3e59c520ebeb8799335c1ccdb45b2935
-
SSDEEP
12288:00GQaLREvrlGSNcchuhkEGlQrlFWNKwOWrZFjsQb6sDoIPNixdnGUpwRp9kj3ym:0WaNEFhekEFhckwOWN7NsdnRwRpKym
Malware Config
Signatures
Files
-
23e296ab01069368a4487be080d601e54cbdd121c6e2575d5f3ff3740aebaff2.exe windows x86
52c40363529c25b697444627863704e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetFileAttributesA
ReadConsoleW
GetProcessHeap
CreateDirectoryW
SetEvent
Sleep
GetStdHandle
LoadLibraryA
GetTickCount
GetPriorityClass
GetFileSize
CreateFileA
CreateSemaphoreA
VirtualProtect
CreateMutexW
MapViewOfFile
SetLastError
OpenSemaphoreA
HeapDestroy
GetStartupInfoA
SetLastError
CreateHardLinkW
HeapSize
DeleteFileW
clbcatq
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sqlwoa
_DeleteFile@4
_GetFileTitle@12
_CharLower@4
_CharUpper@4
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE