Static task
static1
Behavioral task
behavioral1
Sample
8eacc04257fc790416df7f0e760b85d150b793843a0d55246b5da92838c072e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8eacc04257fc790416df7f0e760b85d150b793843a0d55246b5da92838c072e7.exe
Resource
win10v2004-20220901-en
General
-
Target
8eacc04257fc790416df7f0e760b85d150b793843a0d55246b5da92838c072e7
-
Size
15KB
-
MD5
b5b29526aa6ff61990699e439abf24cf
-
SHA1
f2ccc7ebb78a23f16de35f7620f1821b3cf9cab6
-
SHA256
8eacc04257fc790416df7f0e760b85d150b793843a0d55246b5da92838c072e7
-
SHA512
89610b736da94c411fbab33ae64d8061fc2c438728b4b69714088998d3fbf7eaeca7b1dd3d37cf19f9be3b2eed1e92a703bd4f4fbb79e623a5a498e973464334
-
SSDEEP
192:OUPVF51u0JDYZE+Z/o0TEIhKKKWWk8b8KNH9JBQTu1+JXURxNjE55lL:bj7+ZA8EI6Nb3wJUfK9
Malware Config
Signatures
Files
-
8eacc04257fc790416df7f0e760b85d150b793843a0d55246b5da92838c072e7.exe windows x86
be381799786a05e550475d77e9ae830c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
WriteFile
GetPrivateProfileIntW
lstrlenA
GlobalSize
CloseHandle
GlobalFree
GetModuleHandleW
FindVolumeClose
VirtualAlloc
ResumeThread
GetExitCodeProcess
GetStdHandle
CreateEventA
LocalFree
InterlockedExchange
GetEnvironmentVariableW
GetCommandLineA
ResetEvent
CreateMutexA
advapi32
CloseEventLog
RegCreateKeyExW
IsValidAcl
RegQueryValueW
RegDeleteValueA
RegDeleteKeyA
ControlService
ClearEventLogA
IsTextUnicode
IsValidSid
RegEnumKeyW
RegCloseKey
CreateServiceA
amstream
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ