Static task
static1
Behavioral task
behavioral1
Sample
268bc7903df51464e2d852e1f3da468dd0597148d34cedad1401f494abdc1ba2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
268bc7903df51464e2d852e1f3da468dd0597148d34cedad1401f494abdc1ba2.exe
Resource
win10v2004-20221111-en
General
-
Target
268bc7903df51464e2d852e1f3da468dd0597148d34cedad1401f494abdc1ba2
-
Size
297KB
-
MD5
bb61460c9fcf0809be5a9e8bed53ed83
-
SHA1
3a23da108c2346fb84f480c1497c705a824d0cde
-
SHA256
268bc7903df51464e2d852e1f3da468dd0597148d34cedad1401f494abdc1ba2
-
SHA512
bfe6a85c8ae19439a5cbf93307812548cd338c8ac11519138b70cc1456708b071648d6212fdaf2e7971cbc8034ef5a94da167d7f3326592a74b042956c8e5772
-
SSDEEP
6144:seH4vkjgQwa7E+amGCxJgzzOMHWJds3mml26keeNNvKovleFAi:seH4Qjwa7CmG5zCNvGm0klBvgz
Malware Config
Signatures
Files
-
268bc7903df51464e2d852e1f3da468dd0597148d34cedad1401f494abdc1ba2.exe windows x86
65d957066fa3d15a03fb38ff9ce8ca41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
Heap32First
lstrcmpA
GetExitCodeProcess
Sleep
InterlockedDecrement
LoadLibraryA
lstrcpyW
GetPrivateProfileIntA
GetDiskFreeSpaceW
GetModuleHandleW
InterlockedIncrement
CloseHandle
ReadFileEx
FindResourceW
SetEnvironmentVariableA
GetStringTypeW
VirtualAlloc
WaitForSingleObject
GetLastError
GetDiskFreeSpaceW
apphelp
ApphelpCheckIME
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckExe
clbcatq
SetupOpen
SetupOpen
DllGetClassObject
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetupOpen
SetSetupSave
SetSetupSave
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE