Static task
static1
Behavioral task
behavioral1
Sample
2665a527aaa954e2b49319ce4309905203cf82a68787151269b64b324b857c30.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2665a527aaa954e2b49319ce4309905203cf82a68787151269b64b324b857c30.exe
Resource
win10v2004-20220901-en
Errors
General
-
Target
2665a527aaa954e2b49319ce4309905203cf82a68787151269b64b324b857c30
-
Size
60KB
-
MD5
1192ab1aa5bb65cdc88183c0a54ba53e
-
SHA1
c7b78a19af8e20315ebbdcba6092c0c9e90f67e4
-
SHA256
2665a527aaa954e2b49319ce4309905203cf82a68787151269b64b324b857c30
-
SHA512
c05296a8017a795406182137999ffc05d39b9fb73d1a17df7415530ca6589bbd4a95873094239dc753b3b99a23a065398f10287cf39f8435ff0c5641f9a5f984
-
SSDEEP
1536:w4WfvQkN+0zPbQghPsru8Z3DDxCFvsdTMx:w8kN+Ib5hwEF+W
Malware Config
Signatures
Files
-
2665a527aaa954e2b49319ce4309905203cf82a68787151269b64b324b857c30.exe windows x86
9b9f91fb636cf6f7362c981f42ead729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile
memset
memcpy
RtlRandom
NtWriteFile
NtReadFile
NtClose
strchr
strrchr
kernel32
ExitProcess
CreateProcessA
CreateFileA
lstrcatA
GetTickCount
GetModuleFileNameA
VirtualFree
GetModuleHandleA
lstrlenA
WriteFile
OpenProcess
GetLastError
lstrcpyA
VirtualAlloc
CloseHandle
GetVersion
GetCurrentProcessId
GetCurrentProcess
GetWindowsDirectoryA
GetVolumeInformationA
CreateEventW
LocalFree
LocalAlloc
SizeofResource
GetTempPathA
GetTempFileNameA
LockResource
LoadResource
FindResourceW
GetProcAddress
WaitForSingleObject
user32
wsprintfA
wsprintfW
advapi32
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExA
OpenProcessToken
GetTokenInformation
shell32
ShellExecuteExA
ShellExecuteA
ole32
CoInitializeEx
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ