Static task
static1
Behavioral task
behavioral1
Sample
ba0fdeab7e416a0b4ec0b8862fd5c197be6e6c28b17fd6cac8943ca6564c7d27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba0fdeab7e416a0b4ec0b8862fd5c197be6e6c28b17fd6cac8943ca6564c7d27.exe
Resource
win10v2004-20221111-en
General
-
Target
ba0fdeab7e416a0b4ec0b8862fd5c197be6e6c28b17fd6cac8943ca6564c7d27
-
Size
303KB
-
MD5
1edc431079c4387b3c3adec99fdb0f50
-
SHA1
ab4a8493e19e2fb509bc30cb4034e4991473f00e
-
SHA256
ba0fdeab7e416a0b4ec0b8862fd5c197be6e6c28b17fd6cac8943ca6564c7d27
-
SHA512
f87f5a8f05b41cd562db99630eca3492a78edc1ccbc4c20e745a1fdd288e1e5172225f0bbc5176d175c1465f7656a54a9400388947b7bcfe3b635e2dd5202549
-
SSDEEP
6144:/iqtgssZodZ6Z0uuvqCOMS0322RI5F2chKRDHY6M90gs2sloLE:6qtgs8dYOBlTF2lhHY6ERwM
Malware Config
Signatures
Files
-
ba0fdeab7e416a0b4ec0b8862fd5c197be6e6c28b17fd6cac8943ca6564c7d27.exe windows x86
4ffe1433e1fd76fbbdfaccdc24060826
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntW
Sleep
HeapCreate
lstrcmpA
GetFileAttributesA
WaitForSingleObject
SetEnvironmentVariableW
CreateDirectoryA
LoadLibraryExA
GetDiskFreeSpaceA
Sleep
lstrcmpiA
GetPrivateProfileSectionA
GetDiskFreeSpaceA
FindResourceW
GetExitCodeProcess
GetPrivateProfileIntW
InterlockedDecrement
Sleep
LoadLibraryA
GetLongPathNameW
WriteFileEx
InterlockedIncrement
catsrv
OpenComponentLibraryTS
DllCanUnloadNow
CreateComponentLibraryTS
GetCatalogCRMClerk
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE