Static task
static1
Behavioral task
behavioral1
Sample
fb9601d1e3a5615893d527b185f79582c12e1a65b8996f972db77de6c32a3c6b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb9601d1e3a5615893d527b185f79582c12e1a65b8996f972db77de6c32a3c6b.exe
Resource
win10v2004-20221111-en
General
-
Target
fb9601d1e3a5615893d527b185f79582c12e1a65b8996f972db77de6c32a3c6b
-
Size
299KB
-
MD5
b7696c7205b940ff21aff36bd7b65380
-
SHA1
b7ecfa293bdef5c5d1a17f798f8411b916998106
-
SHA256
fb9601d1e3a5615893d527b185f79582c12e1a65b8996f972db77de6c32a3c6b
-
SHA512
faf9f61c1fc85651a537feda65af29ea597974897ce9d440b00701fb6dca9b8ef4a0d184c2cb56f53d3976c15810627c1bef94fb7b658e5d4d571c0bb3acf637
-
SSDEEP
6144:SPexI8/6Dv0MByuVAS2T3bkuJKsIWLqIIxxPp4:oexT/yMq7sTLkzDYMTy
Malware Config
Signatures
Files
-
fb9601d1e3a5615893d527b185f79582c12e1a65b8996f972db77de6c32a3c6b.exe windows x86
fa70ac79977d0c429d2bd76c20752009
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetDriveTypeA
lstrlenA
LocalFree
HeapCreate
GetPrivateProfileStructW
GetComputerNameA
GetSystemTime
GetModuleHandleA
SetLastError
FindAtomA
GetTickCount
ResumeThread
ResetEvent
GetCommandLineW
GetDiskFreeSpaceA
CreateThread
CloseHandle
GetFileAttributesA
LoadLibraryA
advapi32
CloseEventLog
RegDeleteKeyA
RegEnumValueA
RegQueryValueA
GetFileSecurityW
GetLengthSid
RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
FreeSid
IsTokenUntrusted
RegCloseKey
CreateServiceA
clbcatq
SetSetupSave
SetupOpen
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ