Static task
static1
Behavioral task
behavioral1
Sample
ce0037ef4be94c631b7d76f76926f5e9a8c183bedd1f24ac6f7294e03c065e7a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce0037ef4be94c631b7d76f76926f5e9a8c183bedd1f24ac6f7294e03c065e7a.exe
Resource
win10v2004-20220812-en
General
-
Target
ce0037ef4be94c631b7d76f76926f5e9a8c183bedd1f24ac6f7294e03c065e7a
-
Size
147KB
-
MD5
d3912d5911948170736a5a3ef629f3ea
-
SHA1
7eee87c02794d0a90d36243f9fa45909b4f02b33
-
SHA256
ce0037ef4be94c631b7d76f76926f5e9a8c183bedd1f24ac6f7294e03c065e7a
-
SHA512
b05a8396af0c94a3dba18388cd6d928b2d73679d2fae2219aac23aa0be2e129ce3e6333b1ca6fe06acfbf98f6dd2a4e2f474cce9fb7b57cfc038e6bc19e55360
-
SSDEEP
3072:A/o+Te+TH3+9KoR14T/3ccRghhk6jj8OPZxOc:A/xOy/T4hthZIc
Malware Config
Signatures
Files
-
ce0037ef4be94c631b7d76f76926f5e9a8c183bedd1f24ac6f7294e03c065e7a.exe windows x86
047908f1e5228acd017850a2def8ff33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
GetModuleHandleA
lstrlenA
ResumeThread
ReleaseMutex
GetEnvironmentVariableA
GetModuleFileNameA
IsDebuggerPresent
SuspendThread
TlsAlloc
GetACP
GetStdHandle
CreateFileMappingA
GetStartupInfoA
CancelIo
TlsGetValue
IsBadStringPtrA
HeapCreate
GetDriveTypeA
CreateFileA
user32
DestroyMenu
DrawTextW
GetClassInfoW
PeekMessageA
DestroyWindow
GetWindowLongA
DispatchMessageA
DispatchMessageA
IsWindow
GetSysColor
FindWindowW
IsZoomed
CallWindowProcW
amstream
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
clbcatq
ComPlusMigrate
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 863KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ