Static task
static1
Behavioral task
behavioral1
Sample
af4bd5a3eb8b81d510902f4d4376720ec13d8c91ebfd11f5a1cf50327aa313e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af4bd5a3eb8b81d510902f4d4376720ec13d8c91ebfd11f5a1cf50327aa313e5.exe
Resource
win10v2004-20221111-en
General
-
Target
af4bd5a3eb8b81d510902f4d4376720ec13d8c91ebfd11f5a1cf50327aa313e5
-
Size
245KB
-
MD5
95014f994728ba9fa63c3292149fb20b
-
SHA1
e8dcf1a515f5b992b64b062a1c7ea72a636c6f41
-
SHA256
af4bd5a3eb8b81d510902f4d4376720ec13d8c91ebfd11f5a1cf50327aa313e5
-
SHA512
8ad8bcdee72c07365cb10e37cb00dbe50355e6f818ebdedcd06707e96c1552cd3909ae8dc1f1838d397a9d50343caefb4cb8a7875af7cdc9cebd4878283fa5b3
-
SSDEEP
6144:an8NAKPQdwLFnvSB5y5aOvyPIa0UQ47O+MTvDYWLQ/CinM1:jNAKPQdSFvI0aOq5447OPTv0hfnM1
Malware Config
Signatures
Files
-
af4bd5a3eb8b81d510902f4d4376720ec13d8c91ebfd11f5a1cf50327aa313e5.exe windows x86
2383fee05ff636063a94f11dc62f50ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
EnumResourceTypesW
LoadLibraryExW
VirtualProtectEx
IsBadReadPtr
GetLastError
CreateEventA
CloseHandle
GetConsoleTitleA
lstrlenA
FindClose
GlobalLock
GlobalUnlock
LocalFree
FreeConsole
CancelIo
GetSystemTime
GetStdHandle
CreateMutexA
GetModuleHandleA
user32
CreateWindowExA
EnumWindows
IsMenu
GetParent
GetMessageA
GetDlgItemTextA
GetKeyState
GetMessageA
EndDialog
DialogBoxParamA
IsIconic
GetSubMenu
LoadCursorA
MessageBoxA
clbcatq
CheckMemoryGates
ComPlusMigrate
SetSetupOpen
GetComputerObject
GetCatalogObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ