Static task
static1
Behavioral task
behavioral1
Sample
dbf3a4e233c068c064524b9718fa138217de7a775e8dec24b1b0cb86bfa22699.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dbf3a4e233c068c064524b9718fa138217de7a775e8dec24b1b0cb86bfa22699.exe
Resource
win10v2004-20220812-en
General
-
Target
dbf3a4e233c068c064524b9718fa138217de7a775e8dec24b1b0cb86bfa22699
-
Size
299KB
-
MD5
e2672a6004f4cf854d9305d4b7d5a0ff
-
SHA1
2ceae14aeb445a455f3ebc589cf9ba377fa919a9
-
SHA256
dbf3a4e233c068c064524b9718fa138217de7a775e8dec24b1b0cb86bfa22699
-
SHA512
bdfa0d374e1137280747a7ecb93d0d85f5637b95512a4c3202d6226667c40d338b6bbefcdca4b929b11bc059e1b1a7c210f7e7ea809d5d104cf5b8fa5325153b
-
SSDEEP
6144:F5QuQ2maPl4wswGjNWdUYfJA6BO8d8uA3jKxja3SqAKwEwwwwwwwwwwwwwwwwwwZ:Yl9wswuHYOr8WuAzKx+i6wEwwwwwwww+
Malware Config
Signatures
Files
-
dbf3a4e233c068c064524b9718fa138217de7a775e8dec24b1b0cb86bfa22699.exe windows x86
926a4e13f435b9ed43de9dd386cbeb57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetDateFormatA
ResumeThread
GetDriveTypeA
GetDiskFreeSpaceA
ResetEvent
CloseHandle
SetLastError
LoadLibraryW
CreateFileA
GetTickCount
LocalFree
GetComputerNameA
GetCommandLineW
GetSystemTime
lstrlenA
FindVolumeClose
HeapCreate
GetModuleHandleA
LocalUnlock
advapi32
IsTokenUntrusted
RegEnumKeyExA
GetFileSecurityW
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
GetUserNameA
RegQueryValueA
GetLengthSid
FreeSid
CreateServiceA
CloseEventLog
clbcatq
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetSetupSave
SetupOpen
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ