Static task
static1
Behavioral task
behavioral1
Sample
73b95d42346ac0feaf17d6f72e281f5eae4ac8cfc4df06a83f6de73f40695859.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73b95d42346ac0feaf17d6f72e281f5eae4ac8cfc4df06a83f6de73f40695859.exe
Resource
win10v2004-20221111-en
General
-
Target
73b95d42346ac0feaf17d6f72e281f5eae4ac8cfc4df06a83f6de73f40695859
-
Size
279KB
-
MD5
cfc68789af2a5258a6a203efc330331e
-
SHA1
66f34a6ece4a39b288a74a3c832282f4fac8921d
-
SHA256
73b95d42346ac0feaf17d6f72e281f5eae4ac8cfc4df06a83f6de73f40695859
-
SHA512
d463bb1f4b229240a2d1c7aab54ecb57f76a7dc0309d78cbee6d95bec6532dc14912c190e788d6f01319aa8603d6ad9595fa15a4ca5da8f8c30808bce87fed7e
-
SSDEEP
6144:OQxeMsL5rS7nWAT/4595E6bd6KA3r3xp1ecHKmO62PnbMiDTem:bWLteTw55bdcb3d9HKn7oiDr
Malware Config
Signatures
Files
-
73b95d42346ac0feaf17d6f72e281f5eae4ac8cfc4df06a83f6de73f40695859.exe windows x86
46899dcd9a99a4e5d0cbbd13f0ec1403
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
WriteConsoleW
GetCommandLineA
FindClose
SetEvent
Sleep
GetLastError
GetModuleHandleA
WriteFile
RemoveDirectoryA
FindAtomA
CreateDirectoryW
RemoveDirectoryA
ReleaseMutex
GetFileType
GetLocalTime
ResetEvent
CreateFileMappingA
SetStdHandle
FindClose
lstrlenA
SetLocalTime
CreateEventW
CreateMailslotA
VirtualProtectEx
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
cabview
Uninstall
Uninstall
Uninstall
Uninstall
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ