Static task
static1
Behavioral task
behavioral1
Sample
51bdf1f103bce4ea1f73b83af0a1de1d77cacc3ab22a73ea0f70b7f2bfc39d69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51bdf1f103bce4ea1f73b83af0a1de1d77cacc3ab22a73ea0f70b7f2bfc39d69.exe
Resource
win10v2004-20220812-en
General
-
Target
51bdf1f103bce4ea1f73b83af0a1de1d77cacc3ab22a73ea0f70b7f2bfc39d69
-
Size
297KB
-
MD5
3f539b69a123ea8cabd18709ee3e6baa
-
SHA1
e8a8276828d5cdc4390ee7541ab8c12f4fbd6503
-
SHA256
51bdf1f103bce4ea1f73b83af0a1de1d77cacc3ab22a73ea0f70b7f2bfc39d69
-
SHA512
8bf20be69e6c118ae40f23ecf5c16dddffff0d3a2bf1dda7c6ebb19554b0552c7a46f8b3283cbe64ad2135ddba58c3d3fe5dceacb96cb78ad24fea0948991d73
-
SSDEEP
6144:ymY4El1KUwgS9gmj+jXJYm+t5qNVuWq5dXqDRySt7Q5HQ5WF:ymY4ElZmgMmZYmnbYHXTqUw
Malware Config
Signatures
Files
-
51bdf1f103bce4ea1f73b83af0a1de1d77cacc3ab22a73ea0f70b7f2bfc39d69.exe windows x86
010959c35cb2eab1cee226769333cf9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
LocalFree
CloseHandle
GetTickCount
GetSystemTime
CreateThread
GetComputerNameA
GetModuleHandleA
GetFileAttributesA
TlsGetValue
SetEvent
SuspendThread
ResetEvent
GetCommandLineW
GetDiskFreeSpaceW
FindAtomA
CreateFileA
LoadLibraryW
HeapCreate
GetExitCodeProcess
advapi32
RegDeleteKeyA
CloseEventLog
GetUserNameW
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegEnumValueA
IsTokenRestricted
CreateServiceW
RegEnumKeyExA
GetFileSecurityA
GetLengthSid
CredFree
cryptui
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ