Static task
static1
Behavioral task
behavioral1
Sample
93175acfd5f84381e03409f1fb2c365016e0532e97e68919c83d6dddf867f9e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93175acfd5f84381e03409f1fb2c365016e0532e97e68919c83d6dddf867f9e2.exe
Resource
win10v2004-20221111-en
General
-
Target
93175acfd5f84381e03409f1fb2c365016e0532e97e68919c83d6dddf867f9e2
-
Size
372KB
-
MD5
1b1e4c3407f5862518e1c5e23fa5ebe9
-
SHA1
80c53a221b6d47fc5b7492c468e55f0318b3a783
-
SHA256
93175acfd5f84381e03409f1fb2c365016e0532e97e68919c83d6dddf867f9e2
-
SHA512
8168eac45b8aa6046b2df14b00ae6f68a29332835c3f9d35827cece3b04ee02c9f4215c3124a142ea31158bf15891e03f4a9c321808772f8154f4154e2bd1ed6
-
SSDEEP
6144:9CW+KRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:9CWlneF8m4ewS/HcF+ih7wp10l1h+Txd
Malware Config
Signatures
Files
-
93175acfd5f84381e03409f1fb2c365016e0532e97e68919c83d6dddf867f9e2.exe windows x86
11206d99ca764d16f149939afee367d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
SetEvent
GetDriveTypeA
ReadFile
GetPrivateProfileIntW
GetComputerNameW
GetExitCodeProcess
GetTickCount
ReleaseMutex
GetLocalTime
FreeConsole
CloseHandle
VirtualAlloc
GlobalFree
CreateFileA
LocalFree
ExitThread
FindVolumeClose
GetModuleHandleW
lstrlenA
user32
CallWindowProcA
FillRect
GetDlgItem
GetCaretPos
GetKeyState
EndDialog
GetClientRect
GetMenu
GetClassInfoA
DrawStateW
DispatchMessageA
GetCursorInfo
CreateWindowExA
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
msexch40
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ