Static task
static1
Behavioral task
behavioral1
Sample
72831228bc22fc005dbd7e632e756a97e89aa37c6308adaba0cf0404f1ae8e6f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
72831228bc22fc005dbd7e632e756a97e89aa37c6308adaba0cf0404f1ae8e6f.exe
Resource
win10v2004-20220812-en
General
-
Target
72831228bc22fc005dbd7e632e756a97e89aa37c6308adaba0cf0404f1ae8e6f
-
Size
311KB
-
MD5
47a67949f7b12b436b31ee6ae3a89fc0
-
SHA1
b4b39a790e62e19e31a69faf5cfcc2c1db0dc86f
-
SHA256
72831228bc22fc005dbd7e632e756a97e89aa37c6308adaba0cf0404f1ae8e6f
-
SHA512
7456f89e195e692bea0b010e8cba8576cecc566736997b84270676439fefc3ef4b477471dfc085d9a65b17c7dac717ce8ea5ca4bd73e2bc5147abb003a8004d5
-
SSDEEP
6144:LRhchVSUXxf11J9inpJVdhKNzHqz0hLNT3LPn1ZeShnseT3ng:dhcK8xf11zinpvdhuKzmTbPnuneT3ng
Malware Config
Signatures
Files
-
72831228bc22fc005dbd7e632e756a97e89aa37c6308adaba0cf0404f1ae8e6f.exe windows x86
7ca332bc329d6e94781d942c86fc7536
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResumeThread
GetProcessVersion
GetStringTypeW
GetVolumePathNameA
TlsGetValue
GetPrivateProfileSectionA
CreateEventW
DeleteFileA
SetLastError
CreateEventW
LoadLibraryW
VirtualProtect
GetCurrentThread
FindAtomA
GetDriveTypeA
GetProcessHeap
HeapFree
CreateEventW
lstrlenA
SuspendThread
GetPrivateProfileIntW
clbcatq
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE