Static task
static1
Behavioral task
behavioral1
Sample
0f7be9e3703e8a787bd2efa457fdc571373e36a9f81b8af84410425e2f9874c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f7be9e3703e8a787bd2efa457fdc571373e36a9f81b8af84410425e2f9874c8.exe
Resource
win10v2004-20220812-en
General
-
Target
0f7be9e3703e8a787bd2efa457fdc571373e36a9f81b8af84410425e2f9874c8
-
Size
352KB
-
MD5
37fa0fdf6d076701996d45122a25012e
-
SHA1
87cd7456d33f79c31e22b0498ce980d28212c355
-
SHA256
0f7be9e3703e8a787bd2efa457fdc571373e36a9f81b8af84410425e2f9874c8
-
SHA512
da47754567a1affb113cf797337e4d3b4859ac30e6c9cf5c5d5ba9bf0ac1fa4c39e7907cf437baec354fa1c8ef927e4cbbbf88ef4e4c8bf3a9da331fead18485
-
SSDEEP
6144:1gkgY3+3E05ybdwpF4cuPPeuaURhubgyw0JomzfpfyMjAGgPzmL5j:1kY3KOwoTPTrIbgLg1ANP+5
Malware Config
Signatures
Files
-
0f7be9e3703e8a787bd2efa457fdc571373e36a9f81b8af84410425e2f9874c8.exe windows x86
0bd8c88a6674102fd0878c8465422cd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
GetTickCount
GetCommandLineW
FindClose
GetComputerNameA
lstrlenA
UnmapViewOfFile
GetModuleHandleA
CloseHandle
GetCurrentDirectoryA
GetSystemTime
LocalFree
LoadLibraryW
ResetEvent
HeapCreate
CreateThread
lstrcatA
GlobalUnlock
CreateFileW
Sleep
user32
SetFocus
GetDC
IsWindow
FillRect
CheckRadioButton
DrawEdge
DispatchMessageA
DrawMenuBar
GetScrollBarInfo
CallWindowProcA
GetKeyState
CreateWindowExA
GetDlgItem
clbcatq
SetupOpen
SetSetupOpen
UpdateFromAppChange
CheckMemoryGates
DowngradeAPL
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ