Static task
static1
Behavioral task
behavioral1
Sample
f94a978bd0fa0817be53fa96cc7aa187eb07578bf986bd4bb2565c63409eb8cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f94a978bd0fa0817be53fa96cc7aa187eb07578bf986bd4bb2565c63409eb8cf.exe
Resource
win10v2004-20220901-en
General
-
Target
f94a978bd0fa0817be53fa96cc7aa187eb07578bf986bd4bb2565c63409eb8cf
-
Size
56KB
-
MD5
3e7aa7b986553448ab66495bc6455eb3
-
SHA1
c9260d41110fdfec7c6ef38e2092c31d580ae5c3
-
SHA256
f94a978bd0fa0817be53fa96cc7aa187eb07578bf986bd4bb2565c63409eb8cf
-
SHA512
70b339089d7f8bc09f631cf37b742bccf9cfaca51468e5ac07c19717fa9dabbfff14d86492882e401e93ce9a287a5b11d75844b6bf593919dbd8a8526e8304d2
-
SSDEEP
768:EB6BD/CXR+BBCaojPmgNEMQksmJdUNVEK006ofUKdlhSSMdLDNNHWj:26BD6+5orm+EoUEyUiMd72j
Malware Config
Signatures
Files
-
f94a978bd0fa0817be53fa96cc7aa187eb07578bf986bd4bb2565c63409eb8cf.exe windows x86
e63c484c783557dc2a441fce20e4b8ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetLogicalDriveStringsA
FindFirstFileW
WaitForSingleObject
SearchPathA
GetCurrentDirectoryW
CreateEventA
SetEnvironmentVariableA
OpenMutexW
GetLocaleInfoW
GetFileSize
CreateSemaphoreW
GetShortPathNameA
FileTimeToLocalFileTime
GetStartupInfoA
InterlockedIncrement
DeviceIoControl
GetTickCount
GetProcAddress
DeleteFileA
WriteConsoleW
GetModuleHandleA
clbcatq
SetupOpen
CoRegCleanup
SetSetupOpen
SetSetupSave
user32
LoadImageA
IsCharLowerW
GetMessageA
DefDlgProcA
PeekMessageW
MessageBoxW
GetClassInfoA
DrawIcon
GetKeyNameTextA
DialogBoxParamW
FindWindowA
PostMessageW
DispatchMessageW
LoadStringA
esent
JetCloseDatabase
JetBeginTransaction
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ