Static task
static1
Behavioral task
behavioral1
Sample
25e164547b25900e8bb2a1eb5b65a0c2a0a3a3b43b177fd6576258ecce0634f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25e164547b25900e8bb2a1eb5b65a0c2a0a3a3b43b177fd6576258ecce0634f9.exe
Resource
win10v2004-20220901-en
General
-
Target
25e164547b25900e8bb2a1eb5b65a0c2a0a3a3b43b177fd6576258ecce0634f9
-
Size
41KB
-
MD5
4594a8ef3df1e77ed7160a17c41b8bbe
-
SHA1
9a8dde205393c8c58af03c8799aaec21178f1bea
-
SHA256
25e164547b25900e8bb2a1eb5b65a0c2a0a3a3b43b177fd6576258ecce0634f9
-
SHA512
6f27f6b6539050e1074e906a3b4f9c6eae35a38a232b79076e7024426cadae1a7252b35ada2a5e33b7a2be7f5cfd0aeaedef25126ffe9585c7dab51ba7cef222
-
SSDEEP
768:L9sYd6+D+OSs5R55hwc+6dlRB0RaEXj/3udBnrvO6fVYlkcMn:Lv6B0Pv6aC/3YyEyW
Malware Config
Signatures
Files
-
25e164547b25900e8bb2a1eb5b65a0c2a0a3a3b43b177fd6576258ecce0634f9.exe windows x86
f2c6ce3536973d6f7d9b8686b5e1d462
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LockFileEx
MapViewOfFile
MultiByteToWideChar
GetVolumeInformationA
SetFilePointer
SetFilePointerEx
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
GetTickCount
GetTempPathA
GetLastError
GetFileSize
GetCurrentProcess
ExitProcess
DeviceIoControl
DeleteFileA
CreateFileMappingA
CreateFileA
ReadFile
CloseHandle
user32
wsprintfA
CharUpperBuffW
advapi32
LookupPrivilegeValueA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
ChangeServiceConfigA
AdjustTokenPrivileges
OpenSCManagerA
OpenServiceA
StartServiceA
OpenProcessToken
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE