Static task
static1
Behavioral task
behavioral1
Sample
09a800f136caebd3b5b68e3935fcfad841a5c15674eb7c89a9147d1b18bd3970.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
09a800f136caebd3b5b68e3935fcfad841a5c15674eb7c89a9147d1b18bd3970.exe
Resource
win10v2004-20220812-en
General
-
Target
09a800f136caebd3b5b68e3935fcfad841a5c15674eb7c89a9147d1b18bd3970
-
Size
54KB
-
MD5
339da48571fe4453d726e295c8f7f287
-
SHA1
595d4ffeba2e363dd8a37f27eea885bb703b2691
-
SHA256
09a800f136caebd3b5b68e3935fcfad841a5c15674eb7c89a9147d1b18bd3970
-
SHA512
7fa49036d468b390b2ae692604e9fe90bc8cb434c9c1679eb876c3bc1dc1272a680f8f8b53e9adda88de5ff330006c991859937244cf8eb3bdafe098652f6bd6
-
SSDEEP
768:YlvcaZtjhMztycuXDQewcJvC11ttn5sHygHs4rQeABPLVpyUXJy+O3zx/mLGPd:aUajhM5ycuCmq1ZnSJ2BTVTJy+OcLGl
Malware Config
Signatures
Files
-
09a800f136caebd3b5b68e3935fcfad841a5c15674eb7c89a9147d1b18bd3970.exe windows x86
619a7f5a8861db8a87dd15fa63698c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GlobalFlags
ReleaseMutex
CloseHandle
CreateEventA
GetModuleHandleA
GetCommandLineA
SetEvent
SetConsoleCP
GetTickCount
lstrlenW
GetModuleFileNameW
HeapCreate
GetTimeFormatA
Sleep
SuspendThread
DeleteFileA
OpenMutexA
CloseHandle
SetFilePointer
advapi32
RegQueryValueW
IsValidSecurityDescriptor
InitializeSid
CreateServiceW
IsValidAcl
ClearEventLogW
ControlService
RegEnumKeyA
IsTextUnicode
IsValidSid
RegCreateKeyExW
CreateProcessAsUserA
RegDeleteValueA
mdminst
ClassInstall32
ClassInstall32
ClassInstall32
ClassInstall32
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ