Static task
static1
Behavioral task
behavioral1
Sample
4155052bd111f177a4e59198789ed73008426b1be1482e7152e9d93087a5464b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4155052bd111f177a4e59198789ed73008426b1be1482e7152e9d93087a5464b.exe
Resource
win10v2004-20220812-en
General
-
Target
4155052bd111f177a4e59198789ed73008426b1be1482e7152e9d93087a5464b
-
Size
816KB
-
MD5
8f65a88b03f4a3001209f3cd6613459f
-
SHA1
c5ff5ee0ca99619e03c1310f63cd9ec4a8e4d56e
-
SHA256
4155052bd111f177a4e59198789ed73008426b1be1482e7152e9d93087a5464b
-
SHA512
1459ca450b028f9ad2b13cb54e5fd13e290afd29c36a8f88f8f980bdb81a7955e9e636790fd56ec0373330dac596ab62d70fe9706012be748e6e0436d3d1a43b
-
SSDEEP
24576:i7j56mpeKTu1Alwc7+cNbdswP16dw3JdI4:i7FNcKTu1iswPkdIJd
Malware Config
Signatures
Files
-
4155052bd111f177a4e59198789ed73008426b1be1482e7152e9d93087a5464b.exe windows x86
1bce06711971953ad3484a4b66c731fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
lstrcatA
Beep
Beep
Beep
TlsGetValue
GetModuleHandleA
GetDiskFreeSpaceA
lstrcmpA
Beep
Beep
CreateDirectoryA
SetThreadPriority
Beep
VirtualFree
Beep
WriteConsoleW
VirtualProtect
Beep
OpenMutexA
GetPrivateProfileIntA
SetCurrentDirectoryW
GetFileSize
FormatMessageA
Beep
SetLocaleInfoW
GetCommandLineA
DeleteFileW
GetCurrentThreadId
catsrvut
RegDBBackup
RegDBRestore
StartMTSTOCOM
CGMIsAdministrator
Sections
.TEXT Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE