Static task
static1
Behavioral task
behavioral1
Sample
8e2dbb2f32ef3f530ed19d4b72b860f3666b0449087f29a4962d3759aa5e8da4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e2dbb2f32ef3f530ed19d4b72b860f3666b0449087f29a4962d3759aa5e8da4.exe
Resource
win10v2004-20220812-en
General
-
Target
8e2dbb2f32ef3f530ed19d4b72b860f3666b0449087f29a4962d3759aa5e8da4
-
Size
774KB
-
MD5
d89ac721a542d21e4e628b9700b190a3
-
SHA1
869992e37f0f07e47ec4892272e5124506a9c88a
-
SHA256
8e2dbb2f32ef3f530ed19d4b72b860f3666b0449087f29a4962d3759aa5e8da4
-
SHA512
17a7a204bc110e01c7e5353a41ab3dca75ff955211621bd340e306d246d729a7b1629860fc6000bbcbdce9b8afeb96b3142a396ff8cf16af0a5a70f2e0047f65
-
SSDEEP
24576:OrQ2XLDv9nfIV6u5BQIeBf4gYbsEkNcza6:32D2V75BQIeJ4gYwEU4l
Malware Config
Signatures
Files
-
8e2dbb2f32ef3f530ed19d4b72b860f3666b0449087f29a4962d3759aa5e8da4.exe windows x86
c8a12f3dc4336c95eb4d7fbe1fc4038e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetTickCount
CloseHandle
HeapCreate
lstrlenA
GetModuleHandleA
GetSystemTime
ResumeThread
GetDriveTypeA
GetPrivateProfileStructA
FindAtomA
GetDiskFreeSpaceA
CreateThread
GetFileAttributesA
CreateFileA
GetCommandLineW
SetLastError
LocalFree
LoadLibraryA
GetComputerNameA
advapi32
GetUserNameA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
CloseEventLog
RegEnumKeyExA
GetLengthSid
FreeSid
RegCreateKeyExA
RegEnumValueA
GetFileSecurityW
IsTokenUntrusted
CreateServiceA
clbcatq
SetSetupSave
ComPlusMigrate
SetupOpen
CheckMemoryGates
DllGetClassObject
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE