Static task
static1
Behavioral task
behavioral1
Sample
c1b795b45dd1c70a8ac1fa72459aa4bfc9b86363c01bc54d811b5a3b65feccb0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c1b795b45dd1c70a8ac1fa72459aa4bfc9b86363c01bc54d811b5a3b65feccb0.exe
Resource
win10v2004-20220812-en
General
-
Target
c1b795b45dd1c70a8ac1fa72459aa4bfc9b86363c01bc54d811b5a3b65feccb0
-
Size
109KB
-
MD5
38b30635ce5553f31d7047b04713071f
-
SHA1
0404abd58a4ce7be627dce5834a16e92a414790c
-
SHA256
c1b795b45dd1c70a8ac1fa72459aa4bfc9b86363c01bc54d811b5a3b65feccb0
-
SHA512
f7399aadb9f873ecf566c5c9af299158e5981e9da40076559c02a64ae4685f6dea7c41b0cf02d1cf731fe2e72edd44cbeacf5cf5b3c6422f69b8dc6a96270dcf
-
SSDEEP
3072:7ZDtmb7TRyetYWn5MWB55Yc/QaaHw7Koj4rtFlpb:7Zxmb7TRyoYiCWBbT4pb
Malware Config
Signatures
Files
-
c1b795b45dd1c70a8ac1fa72459aa4bfc9b86363c01bc54d811b5a3b65feccb0.exe windows x86
447f3b0bc564ad1a9785566bb42017e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GlobalCompact
GetBinaryTypeW
VirtualProtect
GetProfileStringW
netapi32
NetUserGetInfo
NetWkstaSetInfo
NetApiBufferFree
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
OleUninitialize
setupapi
SetupCloseInfFile
SetupQueryFileLogA
SetupInitializeFileLogA
SetupCloseLog
SetupOpenLog
SetupRemoveFileLogEntryA
SetupGetFileCompressionInfoA
SetupGetInfFileListA
SetupScanFileQueueA
SetupInstallFilesFromInfSectionA
SetupOpenAppendInfFileA
SetupOpenFileQueue
SetupGetSourceFileLocationA
SetupGetSourceFileSizeA
Sections
.text Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ