Static task
static1
Behavioral task
behavioral1
Sample
c0328e29d7c775ea9b91236bff45bb78750b3cbe884a3630c9385b2ecd45c50c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0328e29d7c775ea9b91236bff45bb78750b3cbe884a3630c9385b2ecd45c50c.exe
Resource
win10v2004-20220901-en
General
-
Target
c0328e29d7c775ea9b91236bff45bb78750b3cbe884a3630c9385b2ecd45c50c
-
Size
816KB
-
MD5
8d043b2113ade48ca46cb7fff5e5eb41
-
SHA1
7c4094d88d14257aae6deaa03862a650d3e3cb29
-
SHA256
c0328e29d7c775ea9b91236bff45bb78750b3cbe884a3630c9385b2ecd45c50c
-
SHA512
4208e89b029d55dccf8b3971c37cc0e386eb89bf82311f914694aedcb4877c99c2309d594b1be753a91826ed6d2e43752c1c597c2c85229c30ed3c95de4a84c5
-
SSDEEP
24576:+3Sd0tHLuzglOKMG37alVQ67QlxIMnaErOjEP:KVlL4glbMGraTLclxIMaeQ
Malware Config
Signatures
Files
-
c0328e29d7c775ea9b91236bff45bb78750b3cbe884a3630c9385b2ecd45c50c.exe windows x86
6a16a63b9f7167a83f9f62f79ac2087e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
VirtualProtect
GetDiskFreeSpaceA
SetLocaleInfoW
Beep
lstrcmpA
SetCurrentDirectoryW
Beep
FormatMessageA
VirtualFree
TlsGetValue
GetPrivateProfileIntA
GetCommandLineA
Beep
GetModuleHandleA
GetFileSize
Beep
CreateDirectoryA
SetThreadPriority
OpenMutexA
Beep
GetCurrentThreadId
WriteConsoleW
Beep
Beep
Beep
Beep
lstrcatA
DeleteFileW
catsrvut
RegDBRestore
RegDBBackup
CGMIsAdministrator
StartMTSTOCOM
Sections
.TEXT Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE