Static task
static1
Behavioral task
behavioral1
Sample
c2b15fcb56938f240463080eeefb0f973456ea1bd03532c491f1de0fa4f4d608.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2b15fcb56938f240463080eeefb0f973456ea1bd03532c491f1de0fa4f4d608.exe
Resource
win10v2004-20220812-en
General
-
Target
c2b15fcb56938f240463080eeefb0f973456ea1bd03532c491f1de0fa4f4d608
-
Size
64KB
-
MD5
0c704a5b819c2a37d34b105e81f032e0
-
SHA1
40b01787b80e639cad8ff6986dcfe2d66ce3b67f
-
SHA256
c2b15fcb56938f240463080eeefb0f973456ea1bd03532c491f1de0fa4f4d608
-
SHA512
f64c8a2d94eb9a11bc9622e7d5d77a16b086b477b437fd4cc0ee480c2313ffadb52a90b30f293f866e16b7491adc038972f330e1ac60d793f75972bf705b7f90
-
SSDEEP
1536:UikkGab2alqkSsRP9+2W3EosLZokJm7fPAI4T+oHc98p:UikkG2EkPRP9+Z34LZoxlM+T98
Malware Config
Signatures
Files
-
c2b15fcb56938f240463080eeefb0f973456ea1bd03532c491f1de0fa4f4d608.exe windows x86
70b3e7de6360b341996cb3248c3d9e59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
GetFileAttributesA
ReleaseMutex
CloseHandle
ReadFile
GetCurrentDirectoryA
HeapCreate
CreateMutexA
GetModuleHandleA
lstrlenW
IsBadStringPtrA
WriteConsoleW
GetFileSize
FindResourceA
lstrcpyW
IsValidLocale
WriteConsoleW
WriteConsoleW
GetFileTime
GetLastError
GetStartupInfoA
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
clbcatq
SetSetupSave
SetupOpen
SetupOpen
SetSetupSave
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE