Static task
static1
Behavioral task
behavioral1
Sample
0cf2eb995cc72b79703e6a17a5c5bd0f4f770e4b09b360c076f6ca75bb742705.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0cf2eb995cc72b79703e6a17a5c5bd0f4f770e4b09b360c076f6ca75bb742705.exe
Resource
win10v2004-20220812-en
General
-
Target
0cf2eb995cc72b79703e6a17a5c5bd0f4f770e4b09b360c076f6ca75bb742705
-
Size
305KB
-
MD5
a1780fb6c8db609e6be9e8a34db7c5d0
-
SHA1
4ba3d89ad65b371a9b3aeef36f5ef3e6c6b9a988
-
SHA256
0cf2eb995cc72b79703e6a17a5c5bd0f4f770e4b09b360c076f6ca75bb742705
-
SHA512
457b01b95fe8da2cc498b2b1f8afb451a46e38101ba75f5d65ab46bd67d6cd704ed017f71f843eab4f4f889d8fe40c937b33e04eb0e9627a5dacdc8f22026093
-
SSDEEP
6144:H1hHvQ8/325KpXtzWxkLd3QICIjDAmyGCxeQJhkY1:H1hHx/325K/zWxaBjDA3RUY1
Malware Config
Signatures
Files
-
0cf2eb995cc72b79703e6a17a5c5bd0f4f770e4b09b360c076f6ca75bb742705.exe windows x86
b3848c14a1e1fa2620effeb817845c69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetTickCount
GetStringTypeA
GetCurrentProcess
GetLocaleInfoW
SuspendThread
CreateDirectoryW
GetModuleHandleA
VirtualProtect
SetPriorityClass
HeapFree
GetExitCodeThread
GetFileAttributesA
GetFileAttributesA
MapViewOfFile
FindClose
IsValidCodePage
LocalLock
TlsGetValue
FindResourceW
RemoveDirectoryW
advapi32
RegEnumKeyA
IsValidSid
IsValidAcl
IsTextUnicode
ClearEventLogW
ControlService
RegCreateKeyExW
IsValidSecurityDescriptor
InitializeSid
RegQueryValueW
CreateProcessAsUserA
RegDeleteValueA
CreateServiceW
msctf
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE