Static task
static1
Behavioral task
behavioral1
Sample
c38f63a5822f45917ba59e9eeda5cc507d1a4364e8c9ae0fe7d0fbcca4e91ca5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c38f63a5822f45917ba59e9eeda5cc507d1a4364e8c9ae0fe7d0fbcca4e91ca5.exe
Resource
win10v2004-20221111-en
General
-
Target
c38f63a5822f45917ba59e9eeda5cc507d1a4364e8c9ae0fe7d0fbcca4e91ca5
-
Size
801KB
-
MD5
464806e04fe06c33abb2fa8be961eb74
-
SHA1
126b809b8eaef422fea8e57bb9fceca4b2aa22e5
-
SHA256
c38f63a5822f45917ba59e9eeda5cc507d1a4364e8c9ae0fe7d0fbcca4e91ca5
-
SHA512
e7628baa5f4d3dba416fd5be72b8a7a6679e9f3ccf31f4d2d009e04917a29015148b635652fded29d25a213cf729b879af8f2a9d510638ea3190a2e67f3fe49b
-
SSDEEP
24576:z4ePagm18+YATlgfpufIC7zd6Ysc70chVuUasdItJ:8ePNwYATmY170ycUa/
Malware Config
Signatures
Files
-
c38f63a5822f45917ba59e9eeda5cc507d1a4364e8c9ae0fe7d0fbcca4e91ca5.exe windows x86
0d554d2f2f8d91f9e00a7022a0e2d09a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventW
SuspendThread
TlsGetValue
GetDriveTypeA
CreateEventW
GetProcessVersion
GetCurrentThread
VirtualProtectEx
DeleteFileA
lstrlenA
FindAtomA
GetPrivateProfileIntW
GetStringTypeW
HeapFree
GetPrivateProfileSectionA
GetProcessHeap
CreateEventW
LoadLibraryW
SetLastError
CreateEventW
ResumeThread
clbcatq
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
SetupOpen
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileSize
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ