Static task
static1
Behavioral task
behavioral1
Sample
c809c49d866097cebe9f741629c28409fefa6b68d6150f2782b4153b266cdd6e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c809c49d866097cebe9f741629c28409fefa6b68d6150f2782b4153b266cdd6e.exe
Resource
win10v2004-20220812-en
General
-
Target
c809c49d866097cebe9f741629c28409fefa6b68d6150f2782b4153b266cdd6e
-
Size
808KB
-
MD5
7241f29dd756424c0016c9c5dd2fe86e
-
SHA1
8302b4152bcf70c2db8bec11f548c8c8b868f78e
-
SHA256
c809c49d866097cebe9f741629c28409fefa6b68d6150f2782b4153b266cdd6e
-
SHA512
64a93bd1bcf2bd9f375084bcf4c7973561edead31357fc813d53fc64f0bacb47300b8d1a096861d8156aeeb1d2cf6e26623ee7520c00263ae6d5c86a84bee732
-
SSDEEP
12288:hg2Z+bL1EmrPwFepE47Z+xecfQIl+//mPdQhG1TKKZOQEfZ1UuI5gdP:2u+b6maIErPfuqdQMxqQEfZ1HI5gdP
Malware Config
Signatures
Files
-
c809c49d866097cebe9f741629c28409fefa6b68d6150f2782b4153b266cdd6e.exe windows x86
a74b66e0f0838d6d44268c5caf2e87e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
ReleaseMutex
GetExitCodeProcess
FreeConsole
CreateFileW
GetMailslotInfo
GetProcessHeap
CreateThread
GetModuleHandleW
ResetEvent
LocalFree
ReadFile
FindVolumeClose
GetPrivateProfileIntW
GlobalFree
CloseHandle
VirtualAlloc
LocalSize
GetLocalTime
lstrlenA
user32
GetKeyState
SetFocus
GetDlgItem
GetMenu
EndDialog
GetCursorInfo
DrawStateW
GetClassInfoA
CallWindowProcA
GetClientRect
GetSysColor
CreateWindowExA
DispatchMessageA
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ