Static task
static1
Behavioral task
behavioral1
Sample
d29de25cbfb2e94fed7d297487ff6697d4b071a512d5ec5d72449a9958a7d0f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d29de25cbfb2e94fed7d297487ff6697d4b071a512d5ec5d72449a9958a7d0f6.exe
Resource
win10v2004-20220812-en
General
-
Target
d29de25cbfb2e94fed7d297487ff6697d4b071a512d5ec5d72449a9958a7d0f6
-
Size
15KB
-
MD5
a2bcd83accd51ac446c97de3b6a5b090
-
SHA1
c754cb5fe905e133f1621394a9dc1d121f5efb1f
-
SHA256
d29de25cbfb2e94fed7d297487ff6697d4b071a512d5ec5d72449a9958a7d0f6
-
SHA512
4f0d48ffc1b8ea4d917430235c7b04d22f506919b3dca9ac902228b6fe689eeaebd03a5e868a04cb2336248740bbaccb1fac3cdcbbeb3efcb91f472823b2b34a
-
SSDEEP
192:hO2NQ5vvIFaxsAaGQdafBJpYdW9w8JVKNk8sxyVfWJMvErSwZ1CrfWslX+6kgoio:tCLXHpYdW9w8JpS4CrV1+2W
Malware Config
Signatures
Files
-
d29de25cbfb2e94fed7d297487ff6697d4b071a512d5ec5d72449a9958a7d0f6.exe windows x86
bd41d8892a31a1ee8fb9b1cc5035a5e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
SuspendThread
GetExitCodeProcess
WriteFile
GetStdHandle
ReleaseMutex
GetCommandLineA
InterlockedExchange
HeapCreate
GetEnvironmentVariableW
ResetEvent
LocalFree
CreateMutexA
LocalSize
GetPrivateProfileIntW
CloseHandle
CreateEventA
GetModuleHandleW
GetACP
GlobalFree
advapi32
IsValidSecurityDescriptor
RegEnumKeyW
CloseEventLog
RegCreateKeyExW
RegQueryValueW
RegDeleteValueA
ClearEventLogW
IsValidSid
RegCloseKey
IsTextUnicode
CreateServiceA
ControlService
RegDeleteKeyA
devenum
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ