Static task
static1
Behavioral task
behavioral1
Sample
5af23ebd9f02e0d5359e7b45513f11780a9f42648cce05bcf57b27570f116a10.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5af23ebd9f02e0d5359e7b45513f11780a9f42648cce05bcf57b27570f116a10.exe
Resource
win10v2004-20220812-en
General
-
Target
5af23ebd9f02e0d5359e7b45513f11780a9f42648cce05bcf57b27570f116a10
-
Size
199KB
-
MD5
01936494cd67cd86784b7c239e645908
-
SHA1
83ff6391ddca6d9c754eccfdf989d6acb32665a4
-
SHA256
5af23ebd9f02e0d5359e7b45513f11780a9f42648cce05bcf57b27570f116a10
-
SHA512
8647896dc9d7dfa87cd448587f587c71ffd2eae6139ab0e3a81a537c71e5dc52aa89fc26542cf66e0601182bbbdb109216c973726ad02fbf50e1dda91d0cbb83
-
SSDEEP
3072:t0qBn6/HBq3qAdGhS4k5p5pU4T4B+jca8Wz/9DMFIW925pOLA/hmqVvTVLC4HTkF:t9+Bq3qnop535+Wzmw5pSqpheLweX
Malware Config
Signatures
Files
-
5af23ebd9f02e0d5359e7b45513f11780a9f42648cce05bcf57b27570f116a10.exe windows x86
79c360af4a76c2eef7e51ffef10a2f8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
WriteFile
RemoveDirectoryA
CloseHandle
GetCommandLineA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
WaitForMultipleObjects
DeleteAtom
SetVolumeLabelA
IsBadWritePtr
GetDriveTypeW
FindAtomA
GetFileType
CreateSemaphoreW
CreatePipe
ClearCommBreak
AddAtomA
GetModuleHandleA
ExitThread
HeapFree
HeapCreate
SetEndOfFile
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
mtxdm
GetDispenserManager
GetDispenserManager
GetDispenserManager
GetDispenserManager
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE