Static task
static1
Behavioral task
behavioral1
Sample
4feadd47d1ba5fd570d52d64daadb626deda77595fdf826fe70a1527379a0753.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4feadd47d1ba5fd570d52d64daadb626deda77595fdf826fe70a1527379a0753.exe
Resource
win10v2004-20220812-en
General
-
Target
4feadd47d1ba5fd570d52d64daadb626deda77595fdf826fe70a1527379a0753
-
Size
49KB
-
MD5
8a19f445628f00d1f43be383220aa282
-
SHA1
81219d54e34575b56c7a975dc98d2c5cd5965264
-
SHA256
4feadd47d1ba5fd570d52d64daadb626deda77595fdf826fe70a1527379a0753
-
SHA512
824276ce07288b52f98884aca8cf4f8f91a422dc1f88d4a0e6a98a2e52baf678df8e38fb7603aa7d9e0fbb95a912b9f18518c2b82296da6b3466fb993d938d6b
-
SSDEEP
384:8ZIiD53k+Ppqdlm61dFM6yZM0w5R7GNnREqFt+gybbbbbb0g:QZRPIdlmE6hDNnREq2vbbbbbb0g
Malware Config
Signatures
Files
-
4feadd47d1ba5fd570d52d64daadb626deda77595fdf826fe70a1527379a0753.exe windows x86
4beffac1b58ee10a44a971915c9dbbf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
apphelp
SdbDeletePermLayerKeys
SdbEnumMsiTransforms
SdbFindFirstMsiPackage
SdbFindFirstMsiPackage_Str
SdbFindFirstNamedTag
SdbFindFirstTag
SdbFindFirstTagRef
SdbFindNextMsiPackage
SdbFindNextTag
mstask
NetrJobEnum
NetrJobGetInfo
SAGetAccountInformation
SAGetNSAccountInformation
SASetAccountInformation
SASetNSAccountInformation
SetNetScheduleAccountInformation
certcli
CAAccessCheck
CAAccessCheckEx
regapi
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA
msvcrt
fopen
fread
kernel32
OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA
htui
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
iashlpr
AllocateAttributes
sti
StiCreateInstance
polstore
IPSecClosePolicyStore
IPSecCopyFilterData
IPSecCopyFilterSpec
IPSecCopyISAKMPData
IPSecCopyNFAData
IPSecCopyNegPolData
IPSecCopyPolicyData
IPSecCreateFilterData
IPSecCreateISAKMPData
IPSecCreateNFAData
IPSecCreateNegPolData
IPSecCreatePolicyData
IPSecDeleteFilterData
IPSecDeleteISAKMPData
IPSecDeleteNFAData
dbghelp
ImageRvaToSection
ImageRvaToVa
Sections
.text Size: 7KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ