Static task
static1
Behavioral task
behavioral1
Sample
eaf64006249cb90b601ef054849773a3cf8cd68ffc1f6efa1a32cfa8e9cd9fae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf64006249cb90b601ef054849773a3cf8cd68ffc1f6efa1a32cfa8e9cd9fae.exe
Resource
win10v2004-20220812-en
General
-
Target
eaf64006249cb90b601ef054849773a3cf8cd68ffc1f6efa1a32cfa8e9cd9fae
-
Size
381KB
-
MD5
6832d44bff9f6e0249dd267f498abf03
-
SHA1
d818d6292e24423ac903bab829e22b6655ce6cde
-
SHA256
eaf64006249cb90b601ef054849773a3cf8cd68ffc1f6efa1a32cfa8e9cd9fae
-
SHA512
160d0a1bab46cbc5f4c9d066532a533816b0b8453d664c4fad65aa3d34a13eec8221f938ff9704b7b0a27408f8f3acb234625d0b8f3809cd86650b0cce184c05
-
SSDEEP
6144:IeNRMiViWjhtgYXL7TO6dHyF6EDWVUlMVcZOV6fGhmLjAR73t3ygCkv:I8RMizlbq6Vxh8MV9VOpO73tokv
Malware Config
Signatures
Files
-
eaf64006249cb90b601ef054849773a3cf8cd68ffc1f6efa1a32cfa8e9cd9fae.exe windows x86
be703be2528cb7aed5b2b3fb77d3ea68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CloseHandle
ResetEvent
GetStdHandle
VirtualAlloc
LocalFree
lstrlenA
GetEnvironmentVariableW
GetPrivateProfileIntW
GlobalFree
InterlockedExchange
GetModuleHandleW
GlobalSize
ResumeThread
FindVolumeClose
WriteFile
CreateMutexA
CreateEventA
GetCommandLineA
GetExitCodeProcess
advapi32
RegDeleteKeyA
RegCloseKey
RegCreateKeyExW
CreateServiceA
RegQueryValueW
IsValidAcl
RegEnumKeyW
RegDeleteValueA
IsValidSid
IsTextUnicode
CloseEventLog
ControlService
ClearEventLogA
admparse
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
AdmClose
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ