Static task
static1
Behavioral task
behavioral1
Sample
a407ad822d50e9b56aaf47d2f03e4c25112fc00103a399871a3fbb5a4d224b2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a407ad822d50e9b56aaf47d2f03e4c25112fc00103a399871a3fbb5a4d224b2d.exe
Resource
win10v2004-20220812-en
General
-
Target
a407ad822d50e9b56aaf47d2f03e4c25112fc00103a399871a3fbb5a4d224b2d
-
Size
88KB
-
MD5
a09d5b989c02821f7ebb128e1f158d98
-
SHA1
7896e4cb6084a38beb4f0206ce47b62ed4730426
-
SHA256
a407ad822d50e9b56aaf47d2f03e4c25112fc00103a399871a3fbb5a4d224b2d
-
SHA512
7d20c9f1dcbba9720e0d6fe8febeafe40befb8512511533aee60e89fe95ed18eebeaf8729c4ee6a670026482612897d55727aa4833c48bc548f334e3ea8859c5
-
SSDEEP
768:oGOUbhkE22rPtfrtHyeTHwnQXbqkh4WSL/GnKoIve+RQTNYxM1UWKUjrO55m:BOUe2fxAKhBOuKoe2QHuC5
Malware Config
Signatures
Files
-
a407ad822d50e9b56aaf47d2f03e4c25112fc00103a399871a3fbb5a4d224b2d.exe windows x86
6f553533b07eb55595a68902a4115f4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
IsBadReadPtr
LoadLibraryExW
GetDateFormatA
GetModuleHandleA
GetDriveTypeW
GetDiskFreeSpaceExA
CloseHandle
PulseEvent
TlsGetValue
DeleteCriticalSection
FreeConsole
GetLastError
LocalFree
VirtualProtect
FindClose
Sleep
IsBadCodePtr
SetLastError
EnumResourceTypesA
advapi32
LsaFreeMemory
LsaSetSecret
LsaClose
RegLoadKeyA
FreeSid
IsValidSid
AccessCheck
RegCreateKeyExA
OpenEventLogA
CloseTrace
CloseEventLog
GetFileSecurityA
RegCloseKey
RegCloseKey
clbcatq
GetCatalogObject
ComPlusMigrate
SetSetupOpen
GetComputerObject
DowngradeAPL
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE