Static task
static1
Behavioral task
behavioral1
Sample
d08bc326f8ef4553a2d098fb791c79bfd7c38ef29f4d79dc4799db54c6f4c80a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d08bc326f8ef4553a2d098fb791c79bfd7c38ef29f4d79dc4799db54c6f4c80a.exe
Resource
win10v2004-20220812-en
General
-
Target
d08bc326f8ef4553a2d098fb791c79bfd7c38ef29f4d79dc4799db54c6f4c80a
-
Size
81KB
-
MD5
83cb978335c95d672afd884c2fec2439
-
SHA1
98a98ce156bea00560cbcffb44259c89338b3a2f
-
SHA256
d08bc326f8ef4553a2d098fb791c79bfd7c38ef29f4d79dc4799db54c6f4c80a
-
SHA512
b9937466dc31585e24ef27ce78252850ab438f14509708c03a5d4c409af86f0dae3aa439f1b649ee5d745bb49f06db53327231c721302f2a0db02f4062bd7506
-
SSDEEP
768:TToNOUvg8LcT21qYeJwTwt8JMMv/pOEjOSZKn4SYwq0+PxM6wJMvuqeLhhP:/oNOU7AJcwMZOsODn4SYwv+ZM6w2u7h
Malware Config
Signatures
Files
-
d08bc326f8ef4553a2d098fb791c79bfd7c38ef29f4d79dc4799db54c6f4c80a.exe windows x86
3f8308786c7b3eb5bd863bc09c3ce2c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceExA
EnumResourceTypesA
SetLastError
DeleteCriticalSection
TlsGetValue
VirtualProtect
Sleep
GetCommandLineA
GetModuleHandleA
PulseEvent
IsBadReadPtr
LoadLibraryExW
GetLastError
FreeConsole
LocalFree
CloseHandle
FindClose
GetDateFormatA
IsBadCodePtr
GetDriveTypeW
advapi32
RegLoadKeyA
LsaFreeMemory
CloseTrace
GetFileSecurityA
AccessCheck
FreeSid
LsaClose
LsaSetSecret
IsValidSid
RegCreateKeyExA
CloseEventLog
OpenEventLogA
RegCloseKey
RegCloseKey
clbcatq
DowngradeAPL
GetComputerObject
ComPlusMigrate
GetCatalogObject
SetSetupOpen
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE