Static task
static1
Behavioral task
behavioral1
Sample
af500768de3a38359e55cdfe61e0bfc67a06432a8758931fc9d9e7dbf78fba8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af500768de3a38359e55cdfe61e0bfc67a06432a8758931fc9d9e7dbf78fba8c.exe
Resource
win10v2004-20220901-en
General
-
Target
af500768de3a38359e55cdfe61e0bfc67a06432a8758931fc9d9e7dbf78fba8c
-
Size
803KB
-
MD5
3fcb56d4321fdf2ec35f532a1623fbab
-
SHA1
c5f5084435f92f8a091d8729bb90088a2abbba22
-
SHA256
af500768de3a38359e55cdfe61e0bfc67a06432a8758931fc9d9e7dbf78fba8c
-
SHA512
4ae236edb56980826b074dc93bfda67a48393ef298a8f98aa13ede05db42ece76812f65ae9ca23e4aab6c94487c232877bd344d6938b2bbf80fce460fa97fa2d
-
SSDEEP
24576:e6Z35TbuGTdMc1JdqJGZGptgGU4vSiMealC5:e6lP1JVU40rMe
Malware Config
Signatures
Files
-
af500768de3a38359e55cdfe61e0bfc67a06432a8758931fc9d9e7dbf78fba8c.exe windows x86
841d74a35ce037288466d1f2bd2ccd5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileSize
LoadLibraryA
lstrcpyA
GetLocalTime
SetFileTime
FormatMessageW
ReadFile
GetStartupInfoW
FindResourceA
InitializeCriticalSection
CloseHandle
SetFileAttributesW
CreateMutexW
HeapCreate
GetModuleHandleA
IsBadWritePtr
GetLastError
lstrcatA
SetFileTime
SetFileTime
LeaveCriticalSection
msi
MsiDatabaseCommit
MsiAdvertiseProductW
MsiCollectUserInfoA
MsiConfigureFeatureA
user32
IsZoomed
IsDialogMessageA
DispatchMessageA
PostMessageW
wsprintfW
SetFocus
GetWindowLongW
PeekMessageW
GetWindowTextA
LoadCursorW
MessageBoxA
GetWindowRect
IsWindow
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 786KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 129B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE