Static task
static1
Behavioral task
behavioral1
Sample
d75e17b0e708e0a5f3dba94f35fc925d12d67a7af4d569b0efa13433f2eee9e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d75e17b0e708e0a5f3dba94f35fc925d12d67a7af4d569b0efa13433f2eee9e9.exe
Resource
win10v2004-20220901-en
General
-
Target
d75e17b0e708e0a5f3dba94f35fc925d12d67a7af4d569b0efa13433f2eee9e9
-
Size
305KB
-
MD5
6b42c667ec04b4363ce4db9ef99d52e0
-
SHA1
081d2ce224108b75cec0e7c641bc20b188013636
-
SHA256
d75e17b0e708e0a5f3dba94f35fc925d12d67a7af4d569b0efa13433f2eee9e9
-
SHA512
78749b714de39cc0cb1f818c0ef44beb38fddbbd5f850f21ee496507d486c5dce1a4f96be7eff4fff07a7b148f06118966bc9b8fc30435637f6f1e470098b7a8
-
SSDEEP
6144:XREPQ8/32oYMfHGD0A/CTOyGBBHYQgceGpVw3GeF0egQuEKGC4Ni6acTrr4J2:X8/32Z0A6rGyceGpVw2eOeNuEKGDN1LF
Malware Config
Signatures
Files
-
d75e17b0e708e0a5f3dba94f35fc925d12d67a7af4d569b0efa13433f2eee9e9.exe windows x86
6987543f10456b6afe01a255ec95c5e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
TlsGetValue
GetLocaleInfoW
CreateEventA
GetStringTypeA
LocalLock
VirtualProtectEx
HeapFree
FindClose
CreateDirectoryW
SetPriorityClass
GetFileAttributesW
GetCurrentProcess
SetLastError
RemoveDirectoryW
IsValidCodePage
GetFileAttributesW
SuspendThread
GetTickCount
GetModuleHandleA
FindResourceW
advapi32
IsTextUnicode
CreateProcessAsUserA
ControlService
InitializeSid
IsValidAcl
RegCreateKeyExW
CreateServiceW
RegQueryValueW
IsValidSid
IsValidSecurityDescriptor
ClearEventLogW
RegEnumKeyA
RegDeleteValueA
msctf
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
uxtheme
CloseThemeData
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE