Static task
static1
Behavioral task
behavioral1
Sample
7875771439d7802a94838aee455bce9399d96f335ac48b96325e5ac7acbbed6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7875771439d7802a94838aee455bce9399d96f335ac48b96325e5ac7acbbed6f.exe
Resource
win10v2004-20221111-en
General
-
Target
7875771439d7802a94838aee455bce9399d96f335ac48b96325e5ac7acbbed6f
-
Size
774KB
-
MD5
ca286c93eb78cbb955cc924b39aff435
-
SHA1
4da37399d407b298f9fdb913b52e10e089caa525
-
SHA256
7875771439d7802a94838aee455bce9399d96f335ac48b96325e5ac7acbbed6f
-
SHA512
4547cd87317c1d72e3ff79605193107e1401a019106c96308a5dd8d6ef2ca8417db0a00ad12cfd0d1edb5e1a760392e7fa94328af609315405e88fd6b26c237f
-
SSDEEP
24576:SrQ2XLDv9nfIV6u5BQIeBf4gYbsEkNcza6:b2D2V75BQIeJ4gYwEU4l
Malware Config
Signatures
Files
-
7875771439d7802a94838aee455bce9399d96f335ac48b96325e5ac7acbbed6f.exe windows x86
400d5f54db4828083563638308ecac0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetModuleHandleA
ResetEvent
GetFileAttributesA
lstrlenA
CloseHandle
SetLastError
GetTickCount
FindAtomA
GetComputerNameA
GetCommandLineW
GetDriveTypeA
LoadLibraryA
GetSystemTime
GetDiskFreeSpaceA
GetPrivateProfileStructA
CreateFileA
LocalFree
HeapCreate
CreateThread
advapi32
GetLengthSid
RegEnumValueA
FreeSid
RegDeleteKeyA
RegQueryValueA
RegEnumKeyExA
IsTokenUntrusted
RegCreateKeyExA
GetUserNameA
GetFileSecurityW
CreateServiceA
RegCloseKey
CloseEventLog
clbcatq
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
SetSetupSave
SetupOpen
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE