Static task
static1
Behavioral task
behavioral1
Sample
f7f60a084be4ce19ac75786ea80a2b79d1189d0e6656afedec075fa0d8cd5fb7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f7f60a084be4ce19ac75786ea80a2b79d1189d0e6656afedec075fa0d8cd5fb7.exe
Resource
win10v2004-20220812-en
General
-
Target
f7f60a084be4ce19ac75786ea80a2b79d1189d0e6656afedec075fa0d8cd5fb7
-
Size
821KB
-
MD5
6d00e2ba5b185d37e46f44cd5fd50cc0
-
SHA1
a0b211ed662683f3e98e42ede91dfb2c39bcf322
-
SHA256
f7f60a084be4ce19ac75786ea80a2b79d1189d0e6656afedec075fa0d8cd5fb7
-
SHA512
63125f70bbc7ccdbb3f54c41cc8c7efbe9a08f652adac7403e462ffdacf4924e6a7fba9429b73c3e24e3c24394863ac1e265ef5d7dc491720fe3a704f87c20f9
-
SSDEEP
24576:XNQRM13vYqjsBza3ZJsJtYkO43TDqKrjl/pMYuXLx6wXyyntcHQ0:9QRMRv79ZcYkOeuKrjJiYKLxBLtc
Malware Config
Signatures
Files
-
f7f60a084be4ce19ac75786ea80a2b79d1189d0e6656afedec075fa0d8cd5fb7.exe windows x86
ee636d7442636005e3e9e822ae689dc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
LoadLibraryW
CloseHandle
GlobalFlags
VirtualAllocEx
WriteFile
GetSystemInfo
InterlockedExchange
GetEnvironmentVariableW
GlobalFree
LocalFree
GetStdHandle
CreateEventW
ReleaseMutex
CreateMutexW
FreeConsole
SuspendThread
lstrlenA
GetCurrentThreadId
ResetEvent
advapi32
RegDeleteValueA
RegCreateKeyExW
CloseEventLog
InitializeSid
IsValidSid
IsTextUnicode
CreateServiceW
ControlService
RegCloseKey
RegQueryValueW
IsValidSecurityDescriptor
ClearEventLogW
RegEnumKeyA
InitializeSid
iernonce
InitCallback
InitCallback
InitCallback
InitCallback
InitCallback
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ