Static task
static1
Behavioral task
behavioral1
Sample
67f65f91790337ea5e5c16b587e548d4ee3e8275ab01f6da10bdb1252498c756.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67f65f91790337ea5e5c16b587e548d4ee3e8275ab01f6da10bdb1252498c756.exe
Resource
win10v2004-20220901-en
General
-
Target
67f65f91790337ea5e5c16b587e548d4ee3e8275ab01f6da10bdb1252498c756
-
Size
375KB
-
MD5
334f09d33bbe85036b8fff2938caa246
-
SHA1
4afed0af127dac940926ac53b347b09814b00ca4
-
SHA256
67f65f91790337ea5e5c16b587e548d4ee3e8275ab01f6da10bdb1252498c756
-
SHA512
d6aa4bfc312a1444f03f5b9dda163d6b3b1748900f6ed8ab53e00c64c06a4e7ff69bcc4db2a2d212b01c5a50e3ea18d00ee6d91ec1cb5d79eb1a31281bf25b74
-
SSDEEP
6144:dTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlQ:d/snlM/jzTAV/3alqvU84xRXmY4
Malware Config
Signatures
Files
-
67f65f91790337ea5e5c16b587e548d4ee3e8275ab01f6da10bdb1252498c756.exe windows x86
3899fb7662dab4b44610ada789b01a7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetModuleHandleA
LocalFree
PulseEvent
ResetEvent
HeapCreate
lstrlenA
GetCommandLineW
GetTickCount
GetComputerNameA
lstrcatA
CreateThread
CloseHandle
CreateFileW
GlobalUnlock
GetCurrentDirectoryA
UnmapViewOfFile
GetSystemTime
Sleep
FindClose
user32
GetKeyState
GetDC
DrawMenuBar
DispatchMessageA
CheckRadioButton
SetFocus
GetScrollBarInfo
FillRect
GetDlgItem
CallWindowProcA
DrawEdge
IsWindow
CreateWindowExA
clbcatq
CheckMemoryGates
SetSetupOpen
UpdateFromAppChange
SetupOpen
DowngradeAPL
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ