Static task
static1
Behavioral task
behavioral1
Sample
b69b882cc6ac6172e96cb1ad3c3e7e02ec5a266c27c75a4585991457d321e87c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b69b882cc6ac6172e96cb1ad3c3e7e02ec5a266c27c75a4585991457d321e87c.exe
Resource
win10v2004-20220812-en
General
-
Target
b69b882cc6ac6172e96cb1ad3c3e7e02ec5a266c27c75a4585991457d321e87c
-
Size
308KB
-
MD5
a108972c29b5073edb44c17ca71bbcf7
-
SHA1
42ee6b6ff4917ba5bcd2fb39e95abc0df26e636e
-
SHA256
b69b882cc6ac6172e96cb1ad3c3e7e02ec5a266c27c75a4585991457d321e87c
-
SHA512
79bd0385f74aa22bafc01f3c19c79c4daa5a59e92e8a4a2e9d43d78f06a9ccfa55b39ad5dd08fbc32a0a989190a022d5a3af581b3a6be84612f37bde74a631e5
-
SSDEEP
6144:3xdZ4X5+F2RsaX++ArrWr0HtLbXO64B9horFPwHaC7++iEioVMDqCl:U5+gR1aKr0HhaXAFPrJEioVMDqQ
Malware Config
Signatures
Files
-
b69b882cc6ac6172e96cb1ad3c3e7e02ec5a266c27c75a4585991457d321e87c.exe windows x86
d7c954f77ad2d5e698f0dc4e37a2527e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
InterlockedIncrement
Heap32First
GetExitCodeProcess
InterlockedDecrement
Sleep
ReadFileEx
LoadLibraryA
lstrcpyW
SetEnvironmentVariableA
GetLongPathNameA
lstrcmpA
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetDiskFreeSpaceW
GetDiskFreeSpaceW
GetModuleHandleW
FindResourceW
GetStringTypeW
GetPrivateProfileIntA
GetCurrentDirectoryA
WaitForSingleObject
HeapCreate
apphelp
ApphelpCheckExe
ApphelpCheckIME
SdbCreateMsiTransformFile
AllowPermLayer
clbcatq
SetupOpen
DllGetClassObject
ComPlusMigrate
SetSetupSave
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
SetSetupSave
CheckMemoryGates
SetupOpen
SetupOpen
CheckMemoryGates
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE