Static task
static1
Behavioral task
behavioral1
Sample
590c852314c009ef7b433a79e8b4f49d22383135020df5b865e693d8fead2059.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
590c852314c009ef7b433a79e8b4f49d22383135020df5b865e693d8fead2059.exe
Resource
win10v2004-20221111-en
General
-
Target
590c852314c009ef7b433a79e8b4f49d22383135020df5b865e693d8fead2059
-
Size
308KB
-
MD5
5d27d18282886d9ea3aadfea7a44ea4f
-
SHA1
e6043a5575de3c82c63b913868eb9f7c6f302a01
-
SHA256
590c852314c009ef7b433a79e8b4f49d22383135020df5b865e693d8fead2059
-
SHA512
13fdce112d82e27a7ae946860a187b622a1acb6fa0ab208f62d6965fa3df32d6d96792d944ce4617f54ac9c50e130c28ce2cea39bf4cb520e2d4fbb299e6b215
-
SSDEEP
6144:CJcX26G3v00sVi4GOp6HCHlLIEmXeZAMn6zKpNUSwd89TPpTc:Cam6GaVgOmXeoKpwC5PNc
Malware Config
Signatures
Files
-
590c852314c009ef7b433a79e8b4f49d22383135020df5b865e693d8fead2059.exe windows x86
6dafc5ca601ad1b45dd27ecc97bd6186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrcmpA
WaitForSingleObject
GetDiskFreeSpaceW
HeapCreate
GetExitCodeProcess
Heap32First
GetPrivateProfileIntA
InterlockedDecrement
GetPrivateProfileIntA
ReadFileEx
LoadLibraryA
GetModuleHandleW
GetStringTypeW
GetLongPathNameA
GetCurrentDirectoryA
lstrcpyW
InterlockedIncrement
GetPrivateProfileSectionA
ExitProcess
SetEnvironmentVariableA
FindResourceW
GetDiskFreeSpaceW
apphelp
AllowPermLayer
SdbCreateMsiTransformFile
ApphelpCheckIME
ApphelpCheckExe
clbcatq
ComPlusMigrate
ComPlusMigrate
SetSetupSave
CheckMemoryGates
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
SetSetupSave
DllGetClassObject
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE