Static task
static1
Behavioral task
behavioral1
Sample
a547db7af270389328f7e54dabb21832a84448e7663c25903e0a08e66346936b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a547db7af270389328f7e54dabb21832a84448e7663c25903e0a08e66346936b.exe
Resource
win10v2004-20220812-en
General
-
Target
a547db7af270389328f7e54dabb21832a84448e7663c25903e0a08e66346936b
-
Size
310KB
-
MD5
0caa6dd5838a5a31c45f306e275cfe70
-
SHA1
5443620409a81643ee52a8fb37f654c84593172f
-
SHA256
a547db7af270389328f7e54dabb21832a84448e7663c25903e0a08e66346936b
-
SHA512
139561051e76a9f07807fb25d384755bc62d18187a931ded097c5dade3e1d0d48dc6ad8f90c3f897da5b974c7ee5f1ef92877401ee5c7f421b0f1205028812e9
-
SSDEEP
6144:mld2NBS02xVWUVG4jo1aHnEHp/s99iZfTF52Y11ktihpFvpw:mlGB7RUwsnUpG9afTP11oiHN
Malware Config
Signatures
Files
-
a547db7af270389328f7e54dabb21832a84448e7663c25903e0a08e66346936b.exe windows x86
761023f22c82d2d9ec86e17e61a7b8a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
VirtualProtect
SetLastError
ResumeThread
GetVolumePathNameA
lstrlenA
GetDriveTypeA
GetProcessVersion
GetStringTypeW
SuspendThread
FindAtomA
TlsGetValue
LoadLibraryW
CreateEventW
GetCurrentThread
GetPrivateProfileIntW
DeleteFileA
CreateEventW
HeapFree
GetPrivateProfileSectionA
CreateEventW
clbcatq
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
SetupOpen
DllGetClassObject
ComPlusMigrate
SetupOpen
CheckMemoryGates
d3dramp
RampOldTri
g_RampOld_BeadTbl
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE