Static task
static1
Behavioral task
behavioral1
Sample
53ce92385493be04523856034b6d2b85f04dcd04832fad1029c631488ba894a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53ce92385493be04523856034b6d2b85f04dcd04832fad1029c631488ba894a0.exe
Resource
win10v2004-20220812-en
General
-
Target
53ce92385493be04523856034b6d2b85f04dcd04832fad1029c631488ba894a0
-
Size
382KB
-
MD5
ffb2b7922c30a0e861ef8c0f4ee13beb
-
SHA1
6d9d7d252d317d56c12defd94d725ea45e5fa649
-
SHA256
53ce92385493be04523856034b6d2b85f04dcd04832fad1029c631488ba894a0
-
SHA512
75c832d495b1140ada0332981ae4d301d564ec50ebfd649f284b2276a754b55d5860dc52976c7613b43add472b60c5a457404a2513c316d3c1e03892777ba679
-
SSDEEP
6144:3XaSTVRMyMI8mJ+ehSemWfSZSzuhgrE9dYCb8xf4I7GVltNyEe6EofQKKfnGIYt7:ndRMyMI8mJlmWp6hgricAQG3Xxai5
Malware Config
Signatures
Files
-
53ce92385493be04523856034b6d2b85f04dcd04832fad1029c631488ba894a0.exe windows x86
ca1236b4706f2f75f7b6679dec624f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CreateEventA
InterlockedExchange
GetExitCodeProcess
GetACP
ResumeThread
GetModuleHandleW
FindVolumeClose
GetCommandLineA
WriteFile
GetEnvironmentVariableW
CreateMutexA
GetPrivateProfileIntW
GlobalSize
VirtualAlloc
CloseHandle
GlobalFree
LocalFree
ResetEvent
GetStdHandle
advapi32
RegQueryValueW
IsValidSecurityDescriptor
RegEnumKeyW
CreateServiceA
IsTextUnicode
ClearEventLogW
IsValidSid
RegCloseKey
RegDeleteValueA
ControlService
RegDeleteKeyA
RegCreateKeyExW
CloseEventLog
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ