Static task
static1
Behavioral task
behavioral1
Sample
e526618b79a0f54d3746a012f2136f7e59c83db5f975cada08b6e0128c9beb78.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e526618b79a0f54d3746a012f2136f7e59c83db5f975cada08b6e0128c9beb78.exe
Resource
win10v2004-20220901-en
General
-
Target
e526618b79a0f54d3746a012f2136f7e59c83db5f975cada08b6e0128c9beb78
-
Size
60KB
-
MD5
0bbf01be546691a42eed1085feea7681
-
SHA1
c2904390421ad461b895ac7b45e09d42ebe2ed21
-
SHA256
e526618b79a0f54d3746a012f2136f7e59c83db5f975cada08b6e0128c9beb78
-
SHA512
cd28062addd459179c9a17b4b570a0b5c80c28a9eeed0e3283e1eed5b27b54496a80265649b50f20a266233310af893a07dc706881c831116bb606835ccbe154
-
SSDEEP
768:+DhjgdzKPkd54IB0Bz6gti2GHchdPYClGro8Cd4jWFcDSYW4hoUDkYXCtOtdqicu:4hjyGBz6OGTCYr+Fc2Y7hoU8twdqiO
Malware Config
Signatures
Files
-
e526618b79a0f54d3746a012f2136f7e59c83db5f975cada08b6e0128c9beb78.exe windows x86
a9e1eadfdf7bdd86052c98c4e27902be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualQuery
GetDriveTypeW
GetModuleHandleA
CloseHandle
lstrlenA
HeapCreate
CreateEventW
GetCommandLineA
GetEnvironmentVariableA
GetCommandLineA
GlobalFlags
CloseHandle
GetStartupInfoA
GetFileAttributesA
GetConsoleTitleA
HeapDestroy
GetTimeFormatW
SetLastError
EnumResourceTypesA
advapi32
CreateProcessAsUserA
IsValidSid
IsValidSecurityDescriptor
RegDeleteValueA
RegCreateKeyExW
IsValidSid
RegQueryValueW
InitializeSid
IsValidSid
IsValidAcl
RegEnumKeyA
IsValidSid
IsValidSid
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE