Static task
static1
Behavioral task
behavioral1
Sample
29ffa8ab3144a5cdcf5b196867e414159f960c0908d178bf5f8f9d261eafef82.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
29ffa8ab3144a5cdcf5b196867e414159f960c0908d178bf5f8f9d261eafef82.exe
Resource
win10v2004-20221111-en
General
-
Target
29ffa8ab3144a5cdcf5b196867e414159f960c0908d178bf5f8f9d261eafef82
-
Size
372KB
-
MD5
93167581841fbc59ef9735c57354e200
-
SHA1
9526d16c8a39d4fac1bec8f7760c3dd44b1a8fd2
-
SHA256
29ffa8ab3144a5cdcf5b196867e414159f960c0908d178bf5f8f9d261eafef82
-
SHA512
1d1bf1d2bb48274e9d9251047b6f4327cf55eec52f2d75bf1cb16cff193f77bc8ed75efa7f2a6fe7d4c8caa0c04f06a8b031b2776934c1259a8f0820f5d095ba
-
SSDEEP
6144:fS/jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:KvjVkCrSvoZNyl5fwD
Malware Config
Signatures
Files
-
29ffa8ab3144a5cdcf5b196867e414159f960c0908d178bf5f8f9d261eafef82.exe windows x86
43475b0e9e5f5e4321c3130b9e679a07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
GetExitCodeProcess
SetEvent
ReadFile
CloseHandle
GetPrivateProfileIntW
CreateFileW
GetModuleHandleW
GlobalSize
GetDriveTypeA
ReleaseMutex
GetLocalTime
lstrlenA
VirtualAlloc
GetComputerNameW
ExitThread
GetTickCount
FreeConsole
GlobalFree
LocalFree
user32
CallWindowProcA
GetClassInfoA
GetKeyState
GetMenu
SetFocus
CreateWindowExA
EndDialog
GetCursorInfo
GetClientRect
DrawStateW
GetSysColor
DispatchMessageA
GetDlgItem
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ