Static task
static1
Behavioral task
behavioral1
Sample
56fab0ab0f712a5950e8869ecd58d536b8d94d0433bd90042570f8272050ab67.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
56fab0ab0f712a5950e8869ecd58d536b8d94d0433bd90042570f8272050ab67.exe
Resource
win10v2004-20221111-en
General
-
Target
56fab0ab0f712a5950e8869ecd58d536b8d94d0433bd90042570f8272050ab67
-
Size
768KB
-
MD5
500196224ea2677b3ddca13461025040
-
SHA1
e4c623373a1af6880e9e3c8833576593fe39e78b
-
SHA256
56fab0ab0f712a5950e8869ecd58d536b8d94d0433bd90042570f8272050ab67
-
SHA512
421683f98b75164953e7df082e7d0ff442fcb8cdce0bc91f4713eea61b268f13fe9c7643deb6c8da71555674f05e95882718525b2e74e5f86917a1e6923bb9c1
-
SSDEEP
12288:iIvpmobYeLTMveuMvrds2FQotvPQiBJSHDUxu66PD31:BxmoUeee1/Tvo2XyD31
Malware Config
Signatures
Files
-
56fab0ab0f712a5950e8869ecd58d536b8d94d0433bd90042570f8272050ab67.exe windows x86
eb8bb149b6ac68a4a364a19542259afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetStartupInfoA
HeapDestroy
LoadLibraryA
VirtualProtect
DeleteFileW
GetLocalTime
SetLastError
SetLastError
GetPriorityClass
GetTickCount
CreateSemaphoreA
CreateHardLinkW
CreateMutexW
OpenSemaphoreA
GetFileAttributesA
SetEvent
ReadConsoleW
CreateDirectoryW
GetProcessHeap
MapViewOfFile
Sleep
GetFileSize
HeapSize
GetStdHandle
clbcatq
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sqlwoa
_CharLower@4
_DeleteFile@4
_GetFileTitle@12
_CharUpper@4
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE