Static task
static1
Behavioral task
behavioral1
Sample
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe
Resource
win10v2004-20220812-en
General
-
Target
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2
-
Size
747KB
-
MD5
50272c56d0900e2178db4ae69393e021
-
SHA1
fc19f8d4f6b7342459e657c84f2582c36cea766e
-
SHA256
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2
-
SHA512
744c9983ebc250ef41fadc526fad76d52432913e217c6988a0256d177fc9184185209e25a52c7157fe24eb336db40f3d1614f1faa92c5cfa9863f82716136d4c
-
SSDEEP
12288:okJKhba8Ur4BgOwxYiB3fIL7u39ElrW998nqYykCAOGvfIapvV2u03:mOr4Bd3u3alan8nRHCA9vfrs
Malware Config
Signatures
Files
-
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe windows x86
56124c660a57baf3af450f3fb5d1392b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetEnvironmentVariableA
CreateSemaphoreA
HeapCreate
EnumResourceTypesW
CloseHandle
HeapDestroy
GetModuleHandleA
FileTimeToSystemTime
GetCommandLineA
SuspendThread
GlobalFlags
CloseHandle
DeleteFileA
GetStartupInfoA
FindVolumeClose
WriteConsoleA
SetLastError
lstrlenA
CreateEventW
advapi32
ControlService
IsValidSid
IsValidSid
RegCreateKeyExW
RegEnumKeyA
CreateServiceW
IsValidSid
IsValidSid
RegDeleteValueA
IsValidAcl
InitializeSid
IsValidSid
CloseEventLog
ddrawex
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ