Static task
static1
Behavioral task
behavioral1
Sample
9af46c0f1021da934514d3ee3e22e62c484035dca32002abf174ce31b0f84416.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9af46c0f1021da934514d3ee3e22e62c484035dca32002abf174ce31b0f84416.exe
Resource
win10v2004-20220812-en
General
-
Target
9af46c0f1021da934514d3ee3e22e62c484035dca32002abf174ce31b0f84416
-
Size
870KB
-
MD5
07b1393e28236bcce3b9a1388c429476
-
SHA1
a2ac78ba231b85e3c37e750e31273e8221a070dd
-
SHA256
9af46c0f1021da934514d3ee3e22e62c484035dca32002abf174ce31b0f84416
-
SHA512
40fc69beb539a53e58e18a807c16413ea159ce1fafee02c2f5b4d11084dcc873cf232c4dc2ee7c83f331332d874f01cdf1c41ab2bf9b06aaec1681a5f65bcf3f
-
SSDEEP
24576:j/7nY8vvNLGcg0S+oggQQ0ur2M5jfwIolWS5jOLkfS:jjYC9xgldr2JIox5SLk
Malware Config
Signatures
Files
-
9af46c0f1021da934514d3ee3e22e62c484035dca32002abf174ce31b0f84416.exe windows x86
9290c47a88f10b8e443cb1ca4446e577
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetModuleHandleA
CancelIo
ReleaseMutex
CreateFileMappingA
GetCommandLineW
GetStartupInfoA
CreateFileA
SetLastError
lstrlenA
GetACP
TlsAlloc
HeapDestroy
TlsGetValue
GetModuleFileNameA
ResetEvent
IsBadCodePtr
HeapCreate
GetEnvironmentVariableA
GetStdHandle
advapi32
IsValidAcl
RegEnumKeyA
CreateServiceW
IsValidSid
RegDeleteValueA
CreateProcessAsUserA
IsTextUnicode
ClearEventLogW
IsValidSecurityDescriptor
RegQueryValueW
ControlService
RegCreateKeyExW
InitializeSid
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ