Static task
static1
Behavioral task
behavioral1
Sample
ba07833a73b0c37ef1acb80e8943e7aa2e1ad8c246e6da93005b987d6b381419.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba07833a73b0c37ef1acb80e8943e7aa2e1ad8c246e6da93005b987d6b381419.exe
Resource
win10v2004-20221111-en
General
-
Target
ba07833a73b0c37ef1acb80e8943e7aa2e1ad8c246e6da93005b987d6b381419
-
Size
286KB
-
MD5
00499722eea36f665ee23ec5a2501deb
-
SHA1
041cf52897554dcc9ed446bd6f403153d5a6bc06
-
SHA256
ba07833a73b0c37ef1acb80e8943e7aa2e1ad8c246e6da93005b987d6b381419
-
SHA512
d7d86215ee9e11b00eb8ec9c9135ea3b4286bfa0dcf375403b6246178fc34fb44cde1b49de8d07ac7cbfaba86c57d579909469687be9967de63f5bb881983dd0
-
SSDEEP
6144:vWHjdxZipZpA5FyLwn3YmgMxk9aJ2+EmpTKYDQS/JAitz3IkevcHwsccWw96vDWC:uHApZQII+M2+xBVDzRPl3Ikevc8PvDWC
Malware Config
Signatures
Files
-
ba07833a73b0c37ef1acb80e8943e7aa2e1ad8c246e6da93005b987d6b381419.exe windows x86
94f5b7951e4b8df244dde0dbffde27ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
CreateThread
GetLogicalDrives
GetCurrentThread
GetTimeFormatA
GetACP
GetThreadPriority
InterlockedExchange
GetCurrentProcessId
VirtualProtect
HeapDestroy
GetEnvironmentStringsA
HeapCreate
CreateHardLinkA
IsDebuggerPresent
GetStdHandle
CreateFileMappingA
DeleteAtom
GetModuleHandleA
GetCurrentProcess
GetCommConfig
user32
EndPaint
DrawTextA
GetClassNameA
GetParent
ReleaseDC
DragDetect
ShowWindow
GetWindowTextLengthA
GetTitleBarInfo
wsprintfA
BeginPaint
GetWindow
GetDlgItem
FrameRect
SetActiveWindow
GetFocus
GetCursorPos
SetForegroundWindow
FillRect
advapi32
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyA
RegEnumKeyA
RegFlushKey
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ