Static task
static1
Behavioral task
behavioral1
Sample
12b45bd49bc2ab3c89d054d8d6599a197bf15cc81f3901a3e82162f73fa8d9ae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
12b45bd49bc2ab3c89d054d8d6599a197bf15cc81f3901a3e82162f73fa8d9ae.exe
Resource
win10v2004-20220812-en
General
-
Target
12b45bd49bc2ab3c89d054d8d6599a197bf15cc81f3901a3e82162f73fa8d9ae
-
Size
382KB
-
MD5
707ece50be420d69884f3f6e87e9b350
-
SHA1
5590fb96f53fb93568328ee432edb37726230cac
-
SHA256
12b45bd49bc2ab3c89d054d8d6599a197bf15cc81f3901a3e82162f73fa8d9ae
-
SHA512
6f54a2434100eedf2f2982637ee1d3ae3b5a58f623f35cc780df4b6eb4b8775633453691fbf75cb6ce92274bd7688f6c260fa958755e96725fcebd6ee4f21722
-
SSDEEP
6144:pQVadRMx6y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:1RMxpAGliLy8hAEWZ+7TSHRKSgFBl
Malware Config
Signatures
Files
-
12b45bd49bc2ab3c89d054d8d6599a197bf15cc81f3901a3e82162f73fa8d9ae.exe windows x86
bb72d9c4429fb150d824986105b04b47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
FreeConsole
GetSystemInfo
LoadLibraryW
lstrlenA
ReleaseMutex
GetCommandLineW
ResetEvent
GetPrivateProfileIntA
LocalFree
InterlockedExchange
CreateMutexW
GetStdHandle
LocalSize
CloseHandle
WriteFile
GlobalFree
VirtualAllocEx
CreateEventW
SuspendThread
advapi32
RegCloseKey
RegCreateKeyExW
IsValidSecurityDescriptor
RegDeleteValueA
CreateServiceW
IsTextUnicode
ControlService
CloseEventLog
RegQueryValueW
RegEnumKeyA
InitializeSid
IsValidSid
ClearEventLogW
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ