Static task
static1
Behavioral task
behavioral1
Sample
2391d4e6b02d6ba9ce47ca34a88260c83c2f72a0886932be5a63c117a31c9488.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2391d4e6b02d6ba9ce47ca34a88260c83c2f72a0886932be5a63c117a31c9488.exe
Resource
win10v2004-20220414-en
General
-
Target
2391d4e6b02d6ba9ce47ca34a88260c83c2f72a0886932be5a63c117a31c9488
-
Size
142KB
-
MD5
c20d3f9c5dcd93a3dfd3b6e9aeea2541
-
SHA1
c829d1ab536df96bcc67f136c8453b51e8407934
-
SHA256
2391d4e6b02d6ba9ce47ca34a88260c83c2f72a0886932be5a63c117a31c9488
-
SHA512
4dec42790939d1d486de2c43e802583c60ff984f1c7ed4c40b744635f3a0ec2c8c9c49c3bb6f2d1942cab0da21f61a62a62aaa07381cbc841ef5a49adf3195d9
-
SSDEEP
3072:SEeq35kCkuJSyUMbB1Ldi3o8VPeBFCkjk6XkS/lJk:SCpkCkuP/d1xi4oPsCkjk6Xkik
Malware Config
Signatures
Files
-
2391d4e6b02d6ba9ce47ca34a88260c83c2f72a0886932be5a63c117a31c9488.exe windows x86
a878771c0ee24546c95273f00a472466
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
resutils
ResUtilGetBinaryValue
ClusWorkerStart
ResUtilDupString
ClusWorkerTerminate
cfgmgr32
CM_Add_Empty_Log_Conf
CMP_Report_LogOn
CMP_Init_Detection
CM_Add_Range
advapi32
ReadEventLogA
RegUnLoadKeyW
RegRestoreKeyW
RegCreateKeyExW
RegLoadKeyW
OpenEventLogA
RegOpenKeyA
RegSaveKeyA
LogonUserA
RegEnumKeyA
RegDeleteValueW
kernel32
EnterCriticalSection
LoadLibraryExW
Sleep
OpenFileMappingA
lstrlen
GetDateFormatA
GetCommandLineA
GetModuleHandleA
GetShortPathNameA
GetCurrentThreadId
WaitForSingleObject
lstrcat
Sleep
CreateMailslotW
GetProcAddress
GetSystemDirectoryW
user32
LoadMenuA
GetDlgItemTextA
GetPropW
DrawStateW
LoadBitmapW
LoadIconA
CharToOemW
FindWindowA
InsertMenuW
LoadCursorA
wsprintfA
DialogBoxParamA
IsCharLowerA
CreateWindowExW
PeekMessageW
cmutil
CmMalloc
CmRealloc
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 693B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ