Static task
static1
Behavioral task
behavioral1
Sample
bdef2641986302d524710701a21b734ee79d879564bab1b454a932caae982738.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdef2641986302d524710701a21b734ee79d879564bab1b454a932caae982738.exe
Resource
win10v2004-20220812-en
General
-
Target
bdef2641986302d524710701a21b734ee79d879564bab1b454a932caae982738
-
Size
801KB
-
MD5
0f35ec75373256006661d18a4b57e3f0
-
SHA1
0e8c1a0eb58528662047b46efca5084d79c48d8e
-
SHA256
bdef2641986302d524710701a21b734ee79d879564bab1b454a932caae982738
-
SHA512
5fa063c0aef3088442a3b05d084fb983d1cd82b9043ed8e21d8b3d2024dd1e9c88b5fda896d4588bcf8e01247f6071b755c45b41aa7d0602cb293e9bd81238dd
-
SSDEEP
12288:XNPri5C8mIFU/EBDwCksgg2hNOHRNI/FLPb4htVDKNHD+EiVP6LYgqOQ6/3A3Hw:4HmIF6EBsCg4NIJPshtVDM+tigOQ6PR
Malware Config
Signatures
Files
-
bdef2641986302d524710701a21b734ee79d879564bab1b454a932caae982738.exe windows x86
2e1324b47a9a8550b64d40c371161986
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SuspendThread
GetProcessVersion
DeviceIoControl
CreateEventA
TlsGetValue
GetPrivateProfileSectionA
CreateEventW
ResumeThread
GetStringTypeW
DeleteFileA
VirtualProtectEx
LoadLibraryW
DeviceIoControl
GetDriveTypeA
lstrlenA
SetLastError
HeapFree
GetPrivateProfileIntW
GetCurrentThread
FindAtomA
GetProcessHeap
clbcatq
DllGetClassObject
CheckMemoryGates
SetupOpen
ComPlusMigrate
ComPlusMigrate
SetupOpen
CheckMemoryGates
DllGetClassObject
SetupOpen
ComPlusMigrate
SetSetupSave
SetSetupSave
CheckMemoryGates
pdh
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ