Static task
static1
Behavioral task
behavioral1
Sample
f7fdfb2f0e485a099dd642b6dbf9403d958316c2b1767d7d2a3e5472df7a6f13.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7fdfb2f0e485a099dd642b6dbf9403d958316c2b1767d7d2a3e5472df7a6f13.exe
Resource
win10v2004-20220812-en
General
-
Target
f7fdfb2f0e485a099dd642b6dbf9403d958316c2b1767d7d2a3e5472df7a6f13
-
Size
199KB
-
MD5
21b920198cb321656e596a1fc9d9596f
-
SHA1
065c190c34844b9b4d2e59ff3c9e3fa49e37d6f5
-
SHA256
f7fdfb2f0e485a099dd642b6dbf9403d958316c2b1767d7d2a3e5472df7a6f13
-
SHA512
491ba7c7293ed2868144baa73aaa444019f51946b7cbd3b8cf67c39dccc2992ec76ad0356db69e164ac2a0620744f929c60a3a22833ff05cb7545a1858b3115d
-
SSDEEP
3072:wn6/HBq3qAdGhS4k5p5pU4T4B+jca8Wz/9DMFIW925pOLA/hmqVvTVLC4HTkweo3:w+Bq3qnop535+Wzmw5pSqpheLwei
Malware Config
Signatures
Files
-
f7fdfb2f0e485a099dd642b6dbf9403d958316c2b1767d7d2a3e5472df7a6f13.exe windows x86
cea788b5764f316eb3c7971900201d5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelA
GetProcessHeap
AddAtomA
FindAtomA
SetEndOfFile
WriteFile
GetFileType
CreateDirectoryA
HeapCreate
ExitThread
DeleteAtom
RemoveDirectoryA
GetCommandLineA
CreateSemaphoreW
GetDriveTypeW
WaitForMultipleObjects
RemoveDirectoryA
FindClose
HeapFree
GetModuleHandleA
GetModuleFileNameA
ClearCommBreak
CloseHandle
CreatePipe
IsBadWritePtr
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE