Static task
static1
Behavioral task
behavioral1
Sample
84615e9d9f8cb4519251e03cafa128d57daf7382086dfc19fa4a707ad65d2bd7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84615e9d9f8cb4519251e03cafa128d57daf7382086dfc19fa4a707ad65d2bd7.exe
Resource
win10v2004-20220812-en
General
-
Target
84615e9d9f8cb4519251e03cafa128d57daf7382086dfc19fa4a707ad65d2bd7
-
Size
768KB
-
MD5
b655ba2b1c2f3d48162ebf5ecae9529d
-
SHA1
a7d295a3ca7683034212b2d7ab1eed3c83251be9
-
SHA256
84615e9d9f8cb4519251e03cafa128d57daf7382086dfc19fa4a707ad65d2bd7
-
SHA512
c3b08a044375aeaaba69f599bbd3b6094bc55a05947381a8962c23c5fac2d12111397936992b50b1530c787fb95a68ad32a02f17f4058a350c384d930deb72e0
-
SSDEEP
12288:VMRRHEZMa5Vpr3zBMRf8TAxTQ5ZG7ZXCIeRh2xaEQ1K80tu3/z5YgfjAvrUWSm+2:0RJWVtKRUTAFSPslQ1K80q7Rjqrnk2
Malware Config
Signatures
Files
-
84615e9d9f8cb4519251e03cafa128d57daf7382086dfc19fa4a707ad65d2bd7.exe windows x86
8c7f2ad551a15a0d7f6551b3746cb579
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
CreateSemaphoreA
SetEvent
CreateMutexW
CreateFileA
VirtualProtect
SetLastError
OpenSemaphoreA
Sleep
ReadConsoleW
HeapSize
GetProcessHeap
MapViewOfFile
CreateHardLinkW
CreateDirectoryW
GetFileAttributesA
HeapDestroy
LoadLibraryA
GetLocalTime
GetStdHandle
GetPriorityClass
GetTickCount
DeleteFileW
SetLastError
GetFileSize
clbcatq
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sqlwoa
_DeleteFile@4
_CharLower@4
_CharUpper@4
_GetFileTitle@12
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE