Static task
static1
Behavioral task
behavioral1
Sample
d90f36b5f257ba1708208c343f951a926f182b1bf996a1677489f1913c2eaec8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d90f36b5f257ba1708208c343f951a926f182b1bf996a1677489f1913c2eaec8.exe
Resource
win10v2004-20220812-en
General
-
Target
d90f36b5f257ba1708208c343f951a926f182b1bf996a1677489f1913c2eaec8
-
Size
310KB
-
MD5
87a7394cb07d2b7563c94c21ef9c9503
-
SHA1
ad25920f6c6df2b2193cec4de5ffdae8ae32f844
-
SHA256
d90f36b5f257ba1708208c343f951a926f182b1bf996a1677489f1913c2eaec8
-
SHA512
109ef5907371b0053be42b107317be611df5e2aeddbd780b1c7473ac8471b2d37ef2dcf3fa63389964f1b1425ad3931a56084607162646f6ba8944fdee899d21
-
SSDEEP
6144:lmqTo5FfhFUYy7xQv8+BnrOEmnf4G+27Rz3NXRt:TToDg/7m0+wEpN2B3Z
Malware Config
Signatures
Files
-
d90f36b5f257ba1708208c343f951a926f182b1bf996a1677489f1913c2eaec8.exe windows x86
5eb9441a0b56cbf42cad1b1eac1f7ba1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
Beep
Beep
VirtualProtect
Beep
GetModuleHandleA
CreateDirectoryA
Beep
WriteConsoleW
Beep
SetThreadPriority
TlsGetValue
Beep
SetCurrentDirectoryW
lstrcmpA
Beep
OpenMutexA
Beep
GetPrivateProfileIntA
lstrcatA
Beep
DeleteFileW
GetDiskFreeSpaceA
GetFileSize
FormatMessageA
Beep
SetLocaleInfoW
VirtualFree
catsrvut
StartMTSTOCOM
RegDBBackup
RegDBRestore
CGMIsAdministrator
Sections
.TEXT Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 290KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE