Static task
static1
Behavioral task
behavioral1
Sample
c842f74028daf9afef5729682465cc21dbff00d48a782ac1d4e92f46ceda4ea0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c842f74028daf9afef5729682465cc21dbff00d48a782ac1d4e92f46ceda4ea0.exe
Resource
win10v2004-20220901-en
General
-
Target
c842f74028daf9afef5729682465cc21dbff00d48a782ac1d4e92f46ceda4ea0
-
Size
298KB
-
MD5
08043fa5535de6cdf8437d18f62781f3
-
SHA1
6d4bbdc978c6e7986358eb8d63e051a9704dbd66
-
SHA256
c842f74028daf9afef5729682465cc21dbff00d48a782ac1d4e92f46ceda4ea0
-
SHA512
77bc691388667c3f098e7f5e99af1e19a2db8d353d25ce410f8bdb611bc6bc59f07cd079c9196c9bb8cbdac4926e2e708490aed8388a6eb4b64adbb0a6d2aef5
-
SSDEEP
6144:FkJzA4yRQKeAbvavsa8g0zUfKdjECJKUSg3/3OPvnBgU72f:FkJzAjRfbvavsxqYnJKUVUBg3f
Malware Config
Signatures
Files
-
c842f74028daf9afef5729682465cc21dbff00d48a782ac1d4e92f46ceda4ea0.exe windows x86
ef6962c63710b48fd730d56fd637e398
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
FindAtomA
GetNumberFormatA
LoadLibraryW
GetCurrentThreadId
SuspendThread
GetCurrentProcessId
TlsGetValue
GetPrivateProfileStringA
LocalFree
GetDriveTypeW
FindClose
LocalFlags
WriteFile
lstrlenW
GetConsoleAliasA
CreateEventW
GetEnvironmentVariableW
InitializeCriticalSection
HeapCreate
user32
GetClassInfoA
DrawTextA
CallWindowProcW
EndDialog
GetSysColor
GetSysColor
DrawStateW
IsWindow
GetClientRect
GetKeyboardType
DispatchMessageA
CreateWindowExA
SetFocus
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ