Static task
static1
Behavioral task
behavioral1
Sample
b4c6a855f0fe2e1a48f7402a408a547d56eecc0fbe9492c92677aabcb9bcafbc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4c6a855f0fe2e1a48f7402a408a547d56eecc0fbe9492c92677aabcb9bcafbc.exe
Resource
win10v2004-20220901-en
General
-
Target
b4c6a855f0fe2e1a48f7402a408a547d56eecc0fbe9492c92677aabcb9bcafbc
-
Size
108KB
-
MD5
0a4f5a2cfcb03a03e4a6f97b5c3af9c1
-
SHA1
d2bb1eb96ced473dcb4e05bf2b8c021d3314d451
-
SHA256
b4c6a855f0fe2e1a48f7402a408a547d56eecc0fbe9492c92677aabcb9bcafbc
-
SHA512
699c1fabc845fdcc56e2930eb5758778b3cbca7182d3a329dd5b5c9ff6b589e6c801d22c729b80cbb20eab99aed2683fba265e8e8355f88a5b8cad0e684e41d0
-
SSDEEP
3072:e+g1CdiEfsUXeFprPcD3v7JCudBJgoHixwvxCYgxlw:LooimsseFWD/9pCoQwvlgxlw
Malware Config
Signatures
Files
-
b4c6a855f0fe2e1a48f7402a408a547d56eecc0fbe9492c92677aabcb9bcafbc.exe windows x86
9cd04d942180ae4f7092971f710ad40f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetVolumeLabelA
AddAtomA
FindAtomA
GetFileType
CloseHandle
SetEndOfFile
HeapCreate
WaitForMultipleObjects
DeleteAtom
RemoveDirectoryA
CreatePipe
HeapFree
GetModuleHandleA
CreateDirectoryA
GetCommandLineA
IsBadWritePtr
WriteFile
GetModuleFileNameA
FindClose
ClearCommBreak
GetDriveTypeW
RemoveDirectoryA
CreateSemaphoreW
ExitThread
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lczcsnq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE