Static task
static1
Behavioral task
behavioral1
Sample
c534b32547c3ec125d4c9e43b010e634dc9f192cbe0fb5a893ac0924fd69159c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c534b32547c3ec125d4c9e43b010e634dc9f192cbe0fb5a893ac0924fd69159c.exe
Resource
win10v2004-20220901-en
General
-
Target
c534b32547c3ec125d4c9e43b010e634dc9f192cbe0fb5a893ac0924fd69159c
-
Size
817KB
-
MD5
72d6b0e80db7d842527f4b74e9504dac
-
SHA1
9efc464613af1e6323f5794ad90acfcccc4b7a69
-
SHA256
c534b32547c3ec125d4c9e43b010e634dc9f192cbe0fb5a893ac0924fd69159c
-
SHA512
46846f4cf3066c3610c55ccf1e3a8c496b8fbd857f4e8e4a36c9e7edc5db7837a0b7367396dea0b77ee73df66a62d542f25ebac0407551b804f61da9a7e14d60
-
SSDEEP
24576:HxSJaZ6fMai1+U1LEq4BmrmE17tvc4C0uJW:MJG6fK1m3mrj4JP
Malware Config
Signatures
Files
-
c534b32547c3ec125d4c9e43b010e634dc9f192cbe0fb5a893ac0924fd69159c.exe windows x86
20d7879f826234c815dcda1ce676e92f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
VirtualQuery
SetThreadPriority
Beep
SetLocaleInfoW
Beep
lstrcatA
Beep
lstrcmpA
DeleteFileW
WriteConsoleW
GetModuleHandleA
GetFullPathNameW
Beep
OpenMutexA
GetFileSize
Beep
SetCurrentDirectoryW
GetCommandLineA
GetPrivateProfileIntA
GetCurrentThreadId
TlsSetValue
Beep
VirtualProtect
Beep
Beep
FormatMessageA
TlsGetValue
Beep
catsrvut
RegDBRestore
RegDBBackup
StartMTSTOCOM
CGMIsAdministrator
Sections
.TEXT Size: 15KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE