Static task
static1
Behavioral task
behavioral1
Sample
b10760713896c31ea6285ac3bfdc05f572f74e36de5f41e84b72dc4829bb526f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b10760713896c31ea6285ac3bfdc05f572f74e36de5f41e84b72dc4829bb526f.exe
Resource
win10v2004-20220812-en
General
-
Target
b10760713896c31ea6285ac3bfdc05f572f74e36de5f41e84b72dc4829bb526f
-
Size
44KB
-
MD5
06fc3624e417ef2461114ef51c5fd9f0
-
SHA1
58fea83bdf96f3bb31138d3f19c20acac7d5ba7d
-
SHA256
b10760713896c31ea6285ac3bfdc05f572f74e36de5f41e84b72dc4829bb526f
-
SHA512
75306884e7e402b69e5c545e7e337275f3e097628c6e30c1b1ce6c4be3f74a59caa2399f1004e6505ec1337900db2b0939886c6a1ecdca6162b5935015b0ffe3
-
SSDEEP
768:xCFh47GegMNB85EPjFo8GKBl3xTvI+tDLoCOAX:xCwqaBPjFo8GKX3xTvI+tDLlOAX
Malware Config
Signatures
Files
-
b10760713896c31ea6285ac3bfdc05f572f74e36de5f41e84b72dc4829bb526f.exe windows x86
946c5f6f320e62ec2ed7fd3634796a2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
olecli32
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
lz32
LZRead
LZOpenFileA
LZOpenFileW
LZStart
msdmo
DMORegister
aclui
EditSecurity
kernel32
GetSystemDirectoryA
CreateFileA
TerminateThread
ReadFileEx
GetTickCount
GetTickCount
ReadConsoleW
authz
AuthzFreeHandle
azroles
AzGetProperty
esent
JetBeginSession
cfgmgr32
CM_Connect_MachineA
clusapi
ClusterGroupControl
Sections
tex Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
data3 Size: 4KB - Virtual size: 69KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plk Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neo Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE