Static task
static1
Behavioral task
behavioral1
Sample
f3e011ba87266ca99083ef810a275cc068e4511ccebb826e26a61f9f192973c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3e011ba87266ca99083ef810a275cc068e4511ccebb826e26a61f9f192973c1.exe
Resource
win10v2004-20220812-en
General
-
Target
f3e011ba87266ca99083ef810a275cc068e4511ccebb826e26a61f9f192973c1
-
Size
372KB
-
MD5
55fafd6239b8cfa356239aa0e5bb9511
-
SHA1
ad486a7b9c8560d386a83e1d74e06d97df462cb6
-
SHA256
f3e011ba87266ca99083ef810a275cc068e4511ccebb826e26a61f9f192973c1
-
SHA512
61d58cf401665dea9a4e1471ad370796b7bc50dffb961dd9366c2346d993edcbe64d7f1131c99c2dd7e06c198119b402bb1298fff2ee54bc7e226eb22b6c7e1e
-
SSDEEP
6144:LaRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:LaneF8m4ewS/HcF+ih7wp10l1h+TxqM
Malware Config
Signatures
Files
-
f3e011ba87266ca99083ef810a275cc068e4511ccebb826e26a61f9f192973c1.exe windows x86
63e9516bacca9809226688e5062e73a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomW
CreateFileA
ExitThread
GetLocalTime
GlobalSize
FreeConsole
GetTickCount
LocalFree
GetFileAttributesW
CloseHandle
GetModuleHandleW
GlobalFree
lstrlenA
ReadFile
GetExitCodeProcess
GetComputerNameW
FindVolumeClose
GetDriveTypeA
GetPrivateProfileIntW
VirtualAlloc
user32
GetCursorInfo
GetCaretPos
DispatchMessageA
CallWindowProcA
DrawStateA
EndDialog
GetDlgItem
CloseWindow
GetMenu
GetClassInfoA
FillRect
GetClientRect
CreateWindowExA
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
msexch40
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ