Static task
static1
Behavioral task
behavioral1
Sample
6e332f7cbea37589a94c2beeb2a74cdb42e54bfb3d080d83ffe5f335f78d38dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e332f7cbea37589a94c2beeb2a74cdb42e54bfb3d080d83ffe5f335f78d38dd.exe
Resource
win10v2004-20220812-en
General
-
Target
6e332f7cbea37589a94c2beeb2a74cdb42e54bfb3d080d83ffe5f335f78d38dd
-
Size
303KB
-
MD5
272d7b90591bb3234808742ebf545ed0
-
SHA1
e9c069346d62445ea9c7c6f551afff29419f2dcf
-
SHA256
6e332f7cbea37589a94c2beeb2a74cdb42e54bfb3d080d83ffe5f335f78d38dd
-
SHA512
fc39ac694924fb02bbcad2b16e046b2a1da13d900b85818e225476373969177d104b318c8d08a796a4a13b045408f031ea7fa16e86c8533d0bfe24587366f0b5
-
SSDEEP
6144:71ZqtgUqpo1DrBpP5w1u4m325oiewlQh6zeEXK/Y5eW6Lvjk/M:7jqtg+rBpr4XegE/Y5efP
Malware Config
Signatures
Files
-
6e332f7cbea37589a94c2beeb2a74cdb42e54bfb3d080d83ffe5f335f78d38dd.exe windows x86
936ed9c6351c61d13bb1db1cd1db5621
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
WriteFileEx
FindResourceW
GetExitCodeProcess
CreateDirectoryA
GetPrivateProfileIntW
InterlockedDecrement
GetPrivateProfileSectionA
GetDiskFreeSpaceW
GetLongPathNameW
Sleep
SetEnvironmentVariableA
LoadLibraryA
GetDiskFreeSpaceW
GetPrivateProfileIntW
LoadLibraryExA
lstrcmpiA
GetFileAttributesA
Sleep
InterlockedIncrement
WaitForSingleObject
lstrcmpA
Sleep
catsrv
GetCatalogCRMClerk
CreateComponentLibraryTS
OpenComponentLibraryTS
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE