Static task
static1
Behavioral task
behavioral1
Sample
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe
Resource
win10v2004-20221111-en
General
-
Target
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6
-
Size
308KB
-
MD5
823e48e22548f3e780f090ac85dc117f
-
SHA1
363b8d6b283c1a299e58dfe1fcb45dfb173f6ab6
-
SHA256
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6
-
SHA512
de8774ac3659d88eebdb943f9483072bd520b6a40e82caa7092591f06afdf2ad4a83953ff67dc8464c78f944eacd85bd070690d0f792b58dfda71f58e8d999c1
-
SSDEEP
6144:0C+0tfge2cZeWnsRJLWP/r1mbd3hAZsEguKUxdJfUkKObuEHlMv:dtb2tWsRgP/r63hSsyKgNuOe
Malware Config
Signatures
Files
-
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe windows x86
75102df8df4b6a6fa9841a1cd0799130
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoW
CreateMutexW
lstrcpyA
CloseHandle
SetFileTime
GetModuleHandleA
lstrcatA
GetLastError
CreatePipe
LeaveCriticalSection
LoadLibraryA
ReadFile
GetFileSize
HeapCreate
IsBadWritePtr
InitializeCriticalSection
FindResourceW
SetFileTime
FormatMessageW
GetExitCodeProcess
SetFileTime
mstscax
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
user32
PeekMessageW
IsWindow
wsprintfA
GetWindowRect
DispatchMessageA
LoadCursorW
PostMessageA
GetWindowLongW
GetWindowTextA
IsDialogMessageA
PostMessageW
SetFocus
MessageBoxA
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE