Static task
static1
Behavioral task
behavioral1
Sample
7c51f4a7ebc73ea4a5d30a5efc8fb27de0adcbb9cf3ef13fc9fb22b18e6cd45e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c51f4a7ebc73ea4a5d30a5efc8fb27de0adcbb9cf3ef13fc9fb22b18e6cd45e.exe
Resource
win10v2004-20220812-en
Errors
General
-
Target
7c51f4a7ebc73ea4a5d30a5efc8fb27de0adcbb9cf3ef13fc9fb22b18e6cd45e
-
Size
159KB
-
MD5
94abfa995052c0865e3e423c21d9d2b7
-
SHA1
b976d6088d189d14b264158378b48f27c7edd257
-
SHA256
7c51f4a7ebc73ea4a5d30a5efc8fb27de0adcbb9cf3ef13fc9fb22b18e6cd45e
-
SHA512
9701f1d76178fd42a8c51a89d6993b58116e5061f8f068c089c6ec318a6763907487e65bfbb6545f89793fd86fd3cbfec94190dfabce37c7a3d51941392d04e0
-
SSDEEP
3072:hhWF1ovYbcOea112bWm8tcwp56ThgkP4VPDduAO5HWRWwOJuYCD:hQnovT3aP7K8BO52RWHm
Malware Config
Signatures
Files
-
7c51f4a7ebc73ea4a5d30a5efc8fb27de0adcbb9cf3ef13fc9fb22b18e6cd45e.exe windows x86
219917ae1c74b2004dac61cb3277e3f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAdjustPrivilege
strchr
ZwCreateFile
ZwDeviceIoControlFile
RtlInitUnicodeString
memset
memcpy
ZwClose
ZwReadFile
ZwWriteFile
ZwOpenFile
_allmul
strrchr
kernel32
lstrcatA
GetTickCount
VirtualFree
GetModuleFileNameA
GetModuleHandleA
lstrlenA
GetWindowsDirectoryA
CreateFileA
OpenProcess
GetLastError
GetProcAddress
CloseHandle
GetVolumeInformationA
VirtualAlloc
GetVersion
GetCurrentProcessId
Sleep
GetCurrentProcess
lstrcpyA
ExitProcess
WriteFile
user32
wsprintfW
ExitWindowsEx
wsprintfA
advapi32
RegCloseKey
RegOpenKeyA
OpenProcessToken
GetTokenInformation
RegCreateKeyA
shell32
ShellExecuteExA
ShellExecuteA
ole32
CoInitializeEx
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ