Static task
static1
Behavioral task
behavioral1
Sample
fbaed7a2d541f62ae74a626abe4606419995d4c426116d012b5a9c26333b5da2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fbaed7a2d541f62ae74a626abe4606419995d4c426116d012b5a9c26333b5da2.exe
Resource
win10v2004-20221111-en
General
-
Target
fbaed7a2d541f62ae74a626abe4606419995d4c426116d012b5a9c26333b5da2
-
Size
303KB
-
MD5
9145e98afc990a12bbc7b7162674bc70
-
SHA1
77a39a23cbef9c8fb1d31a19ef9ef9e2357534c9
-
SHA256
fbaed7a2d541f62ae74a626abe4606419995d4c426116d012b5a9c26333b5da2
-
SHA512
725ed197bb4a50d3b17503ee12e344621ea4ecdbaf3f4891d03a1833cc219d8fe7fcb6e10df0ee2e549bd60cc9d915901fb39329fcd797761160a67a61417255
-
SSDEEP
6144:oqtgMST6mAWDN2jY1Ad38wIq7oAiiqpX6xovCN9c:oqtgF6mAWh2mC3Jo/96xo
Malware Config
Signatures
Files
-
fbaed7a2d541f62ae74a626abe4606419995d4c426116d012b5a9c26333b5da2.exe windows x86
8f3b4fe3919051b5a551b761bb0f65e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
lstrcmpiA
Sleep
LoadLibraryExA
FindResourceW
GetLongPathNameW
Sleep
lstrcmpA
GetFileAttributesA
GetPrivateProfileIntW
InterlockedDecrement
GetPrivateProfileIntW
HeapCreate
GetPrivateProfileSectionA
InterlockedIncrement
GetDiskFreeSpaceA
WriteFileEx
WaitForSingleObject
GetExitCodeProcess
CreateDirectoryA
Sleep
LoadLibraryA
SetEnvironmentVariableW
catsrv
OpenComponentLibraryTS
DllCanUnloadNow
CreateComponentLibraryTS
GetCatalogCRMClerk
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE