Static task
static1
Behavioral task
behavioral1
Sample
736af1ba66d637269270938a737afbd3c80f5611340c5a441df5b6987288921f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
736af1ba66d637269270938a737afbd3c80f5611340c5a441df5b6987288921f.exe
Resource
win10v2004-20220812-en
General
-
Target
736af1ba66d637269270938a737afbd3c80f5611340c5a441df5b6987288921f
-
Size
392KB
-
MD5
0714df63f888d9603b1a64f370af4ec6
-
SHA1
57a9b7ff955e37e46d687243f7c09dbc768c4f85
-
SHA256
736af1ba66d637269270938a737afbd3c80f5611340c5a441df5b6987288921f
-
SHA512
291a9bbccdedd0920c07f40b8c676a32be5e0594436fe0da0724b3e886ae217ed3121a59f361dd97fe42beffbe27060fec9406d54228c1d2c1154fc96ae3eedd
-
SSDEEP
12288:yE4/k/ht3JzqqziId+gX2S6aTny2uKmrE2:yE4spt3tLGId+gm6Rur
Malware Config
Signatures
Files
-
736af1ba66d637269270938a737afbd3c80f5611340c5a441df5b6987288921f.exe windows x86
1354f129f857058387a6f19da7c1fca5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
crypt32
RegQueryValueExU
RegDeleteValueU
RegEnumValueU
RegOpenKeyExU
RegSetValueExU
kernel32
HeapCreate
InterlockedIncrement
GetTickCount
Sleep
CreateFileA
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle
fde
DllGetClassObject
quartz
AMGetErrorTextA
DBToAmpFactor
advapi32
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 512B - Virtual size: 437B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 387KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE