Static task
static1
Behavioral task
behavioral1
Sample
df665e8cd30ae9df6c6e36b663554202bd243db142b3558905cc5ac6132d904a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df665e8cd30ae9df6c6e36b663554202bd243db142b3558905cc5ac6132d904a.exe
Resource
win10v2004-20220812-en
General
-
Target
df665e8cd30ae9df6c6e36b663554202bd243db142b3558905cc5ac6132d904a
-
Size
310KB
-
MD5
827a8cb3feb7bd322ad9c04bd4d17fa0
-
SHA1
a9064c24da36d2c9d44d1efd955a475e68d91156
-
SHA256
df665e8cd30ae9df6c6e36b663554202bd243db142b3558905cc5ac6132d904a
-
SHA512
79d2fbdf0c6d0d9b886e86fb837896beafc2c3cadec08e281a6a2250c16cb3d98b8b43a4469eab34b1a8d45f48ed219c091cd9113dcc15bbdede56814cd78be3
-
SSDEEP
6144:VuC/5jeG/1iQXCtTCxREE4zOaustaXSOB/pcBSLi:LdiQytTSqLVNx6RcBSL
Malware Config
Signatures
Files
-
df665e8cd30ae9df6c6e36b663554202bd243db142b3558905cc5ac6132d904a.exe windows x86
66861115fd747af02d1fd901932c2ff8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
lstrlenA
GetPrivateProfileSectionA
TlsGetValue
GetDriveTypeA
GetProcessHeap
VirtualProtectEx
GetCurrentThread
ResumeThread
ClearCommBreak
GetPrivateProfileIntW
CreateEventW
DeleteFileA
DeviceIoControl
GetStringTypeW
HeapFree
HeapDestroy
DeviceIoControl
LoadLibraryW
CreateEventA
GetFileAttributesW
clbcatq
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetSetupSave
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
SetSetupSave
CheckMemoryGates
SetupOpen
ComPlusMigrate
pdh
PdhGetLogFileSize
PdhGetLogFileTypeA
PdhAddCounterA
PdhCloseLog
Sections
.text Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ