Static task
static1
Behavioral task
behavioral1
Sample
261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96.exe
Resource
win10v2004-20220812-en
General
-
Target
261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96
-
Size
144KB
-
MD5
815749b9226640a317164bd2d1d29eb6
-
SHA1
64b4a57b3d37d02d195e69c2cd8ba9aabc6eda5f
-
SHA256
261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96
-
SHA512
48a32c3b1a9205c5b173128340c6cb5c6955c368e4e035222816b298383b2aade69a12494e6b63a33ab993d4d93549eb223adc2230a0a897f26a8ef5a47b357e
-
SSDEEP
1536:66JOlW6J7dbLuiiiwGJLMRLzi/eHJJGfTEdyaK6vKy6qyDh8Q2naQ59rlCv1:6O6ddwGJLM1WMXcgd5GqyDh32nT2t
Malware Config
Signatures
Files
-
261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96.exe windows x86
6cff8e4920f181442000a54f781edc8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetVersionExA
DuplicateHandle
GetCurrentProcess
WriteFile
GetStartupInfoA
GetModuleHandleA
WinExec
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
GetProcAddress
CloseHandle
CreateFileA
GetLastError
Sleep
LoadLibraryA
OpenProcess
user32
RegisterClassExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
ShowWindow
CreateWindowExA
advapi32
RegQueryValueExA
LookupAccountNameA
ConvertSidToStringSidA
OpenSCManagerA
CloseServiceHandle
StartServiceA
OpenServiceA
RegCloseKey
RegOpenKeyExA
DeleteService
CreateServiceA
GetUserNameA
shlwapi
SHDeleteKeyA
StrStrA
SHSetValueA
msvcrt
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
srand
time
rand
_access
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
fclose
fflush
fwrite
fopen
strstr
_except_handler3
_strlwr
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ