Static task
static1
Behavioral task
behavioral1
Sample
698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564.exe
Resource
win10v2004-20220812-en
General
-
Target
698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564
-
Size
309KB
-
MD5
696066b8e2cfca3cffa4334349719adf
-
SHA1
8d51f6af30481afdd2d6d1408ecb15a1dbe7eb7a
-
SHA256
698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564
-
SHA512
bc6f869cec779aad191271a94b125292afe27f393b21668f40a271de7408019973ea777510c6e129c26f94d2e92d7c8412ac42bbe76995b2ac17e9cff4deb337
-
SSDEEP
6144:TmqxIWZP838yPUF6aZRBJ7zjDz31onYmkQdS6U06Ysj8OuJ3+bsTN:BxIWlI8tFNR3DzFonYmNijBauw
Malware Config
Signatures
Files
-
698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564.exe windows x86
69581437074ce2bb84a3830c6a8786c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
SetLocaleInfoW
Beep
GetCurrentThreadId
GetCommandLineA
TlsGetValue
Beep
Beep
GetModuleHandleA
lstrcmpA
Beep
lstrcatA
TlsSetValue
GetModuleFileNameW
FormatMessageA
VirtualProtect
GetPrivateProfileIntA
Beep
SetCurrentDirectoryW
Beep
GetFullPathNameW
Beep
ReleaseMutex
VirtualQuery
WriteConsoleW
Beep
SetThreadPriority
DeleteFileW
Beep
catsrvut
RegDBBackup
CGMIsAdministrator
RegDBRestore
StartMTSTOCOM
Sections
.TEXT Size: 15KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 290KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ