Static task
static1
Behavioral task
behavioral1
Sample
a349307f421b0d7d3d2f439ff18a7329a31b80672adfe8d260a84d08dd66844f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a349307f421b0d7d3d2f439ff18a7329a31b80672adfe8d260a84d08dd66844f.exe
Resource
win10v2004-20221111-en
General
-
Target
a349307f421b0d7d3d2f439ff18a7329a31b80672adfe8d260a84d08dd66844f
-
Size
372KB
-
MD5
d75f45f721559fcc27d9f9aa7007dd5c
-
SHA1
a7b8b6d5744af4f617ecabd4665c4452f3d79f04
-
SHA256
a349307f421b0d7d3d2f439ff18a7329a31b80672adfe8d260a84d08dd66844f
-
SHA512
c66820a3e281e31330821f7f22b1f1c5cd76c76c5bcd15ecdc43598ebff494b5c690faf9464573bcdccdf01a231691a41e5a51570e888aa454e058ff193a64dc
-
SSDEEP
6144:N0i3jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:SiTvjVkCrSvoZNyl5fwD
Malware Config
Signatures
Files
-
a349307f421b0d7d3d2f439ff18a7329a31b80672adfe8d260a84d08dd66844f.exe windows x86
185cc82486a4beb040fb2c922d618df4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
lstrlenA
GetModuleHandleW
CreateFileW
VirtualAlloc
CloseHandle
ReleaseMutex
GlobalFree
ReadFile
SetEvent
GetTickCount
GetExitCodeProcess
LocalFree
GetDriveTypeA
GetPrivateProfileIntW
GetComputerNameW
ExitThread
GetLocalTime
FreeConsole
GlobalSize
user32
CallWindowProcA
DispatchMessageA
SetFocus
GetMenu
GetClientRect
GetCursorInfo
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
DrawStateW
GetSysColor
GetKeyState
clbcatq
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ