Static task
static1
Behavioral task
behavioral1
Sample
f7245e3681057a9778495cbc1a910051b54281ea64211a9a9688cea7c31c6d9a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f7245e3681057a9778495cbc1a910051b54281ea64211a9a9688cea7c31c6d9a.exe
Resource
win10v2004-20220812-en
General
-
Target
f7245e3681057a9778495cbc1a910051b54281ea64211a9a9688cea7c31c6d9a
-
Size
51KB
-
MD5
3e42d75674c4e1bd24fd54fa77874d08
-
SHA1
fd416ead29917b29f447f5f7d459b09d19ea064d
-
SHA256
f7245e3681057a9778495cbc1a910051b54281ea64211a9a9688cea7c31c6d9a
-
SHA512
540164b751ab8583bd9d51522134f8f2aa8b7dfd422614d7babaf84afa12340cad9dc86f0a2e76a3dad7b379d2bb83d3371cc86e2837d14c49d68c71c5aa9c2b
-
SSDEEP
1536:CzquVZ5NGGvFr0ZZL9uclbLC/+KvcljJiNM52jP:CeuVvAG9eAWnCLcl9QiK
Malware Config
Signatures
Files
-
f7245e3681057a9778495cbc1a910051b54281ea64211a9a9688cea7c31c6d9a.exe windows x86
0d059cc7bea0eca7a3fd69a03bee382b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
CheckTokenMembership
CopySid
GetLengthSid
GetTokenInformation
IsValidSid
IsWellKnownSid
LookupAccountSidW
OpenProcessToken
OpenThreadToken
RegFlushKey
RegQueryValueExW
RegSetValueExW
RegisterServiceCtrlHandlerW
SetServiceStatus
kernel32
DelayLoadFailureHook
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetSystemTimeAsFileTime
GetTimeFormatW
InterlockedCompareExchange
QueryPerformanceCounter
SetFileAttributesW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
user32
OpenDesktopA
SetProcessWindowStation
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ