Static task
static1
Behavioral task
behavioral1
Sample
c16a0cc987c9a3d6058c94d04c943713265bec2669543c9111368bee7edb0e9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c16a0cc987c9a3d6058c94d04c943713265bec2669543c9111368bee7edb0e9f.exe
Resource
win10v2004-20220812-en
General
-
Target
c16a0cc987c9a3d6058c94d04c943713265bec2669543c9111368bee7edb0e9f
-
Size
293KB
-
MD5
60318fa6ea21c33364cee12dcc829b52
-
SHA1
5efde9a3d6016bd21f4e40a13142f0a24a635d0a
-
SHA256
c16a0cc987c9a3d6058c94d04c943713265bec2669543c9111368bee7edb0e9f
-
SHA512
72fa6a3fb53e700492a2714f9286106cf0f59382f695dbe259f40f201e95c6c49b78b1ebc2fa899f99d662f69436c95c4f8f6d16ef60f801c0a364315fb5fef4
-
SSDEEP
6144:JAUOGYCSP3c2jXl/T+d2yc6P4FqDBScJ8/zWH0nIZL8fFYhrv:JAUOGYHPjXcdXwYDBScJyqUIZLouh
Malware Config
Signatures
Files
-
c16a0cc987c9a3d6058c94d04c943713265bec2669543c9111368bee7edb0e9f.exe windows x86
eb1b2fe368bf0a1606999dc7cd82f3a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
CreateSemaphoreA
HeapDestroy
FileTimeToSystemTime
SetLastError
SuspendThread
WriteConsoleA
GetCommandLineA
GetStartupInfoA
CloseHandle
HeapCreate
lstrlenA
GetCommandLineA
DeleteFileA
EnumResourceTypesW
GetModuleHandleA
CloseHandle
FindVolumeClose
GlobalFlags
GetEnvironmentVariableA
advapi32
IsValidAcl
InitializeSid
CloseEventLog
RegCreateKeyExW
IsValidSid
IsValidSid
IsValidSid
ControlService
IsValidSid
CreateServiceW
RegDeleteValueA
RegEnumKeyA
IsValidSid
ddrawex
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ