Static task
static1
Behavioral task
behavioral1
Sample
a3e8ec45cd3e84e2ea5e94cca8becf826220f39b8647ccb218697b4108e61f1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3e8ec45cd3e84e2ea5e94cca8becf826220f39b8647ccb218697b4108e61f1e.exe
Resource
win10v2004-20220812-en
General
-
Target
a3e8ec45cd3e84e2ea5e94cca8becf826220f39b8647ccb218697b4108e61f1e
-
Size
778KB
-
MD5
5f829215ef1f8218f7565d3efca3f570
-
SHA1
a77f58a22d74dcf7709f2823c8d9faccf6705eea
-
SHA256
a3e8ec45cd3e84e2ea5e94cca8becf826220f39b8647ccb218697b4108e61f1e
-
SHA512
cf2cc9a57c6a4c4533500cca243b0a50750fd44e868c0e4b30504b65f146dbdf809f10345e2a46996ede4e207cdd20738079e9b9765faf8fb1e136a294e05923
-
SSDEEP
24576:q+JrhsIew2ay1Mh/yWuN1MUF1M4NgBdN7:q+JasiChyHDr1M3Bj
Malware Config
Signatures
Files
-
a3e8ec45cd3e84e2ea5e94cca8becf826220f39b8647ccb218697b4108e61f1e.exe windows x86
921f51254525637a6f2e23df2f2f0906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
LocalAlloc
GetVersionExA
GetTickCount
LocalFree
user32
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
advapi32
SetTokenInformation
SetSecurityDescriptorDacl
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
CreateProcessAsUserW
RegEnumValueA
DuplicateTokenEx
RegDeleteValueW
RegCloseKey
RegDeleteKeyA
InitializeSecurityDescriptor
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExW
MapGenericMask
OpenProcessToken
GetUserNameA
EqualSid
GetLengthSid
FreeSid
GetTokenInformation
RegEnumKeyExA
RegFlushKey
AllocateAndInitializeSid
AccessCheck
Sections
.text Size: 1024B - Virtual size: 565B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 772KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ