Static task
static1
Behavioral task
behavioral1
Sample
d564a821dfdfc36373b882abb67020d7b308779b4d2718cafad176110063bb5c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d564a821dfdfc36373b882abb67020d7b308779b4d2718cafad176110063bb5c.exe
Resource
win10v2004-20220812-en
General
-
Target
d564a821dfdfc36373b882abb67020d7b308779b4d2718cafad176110063bb5c
-
Size
56KB
-
MD5
83387f59f2c682668f829b52ecdc7af0
-
SHA1
51439d88b76312590b3311b8bd05475123c4ceae
-
SHA256
d564a821dfdfc36373b882abb67020d7b308779b4d2718cafad176110063bb5c
-
SHA512
263a7cc4f0a9025628acfd7ef57177309f32159d662e50ed8b946236c3e36e07a66c23b7bf6bfe2f03ea2427c3c29b6d27d34fecd597ac226b4384a53a8f86d0
-
SSDEEP
1536:Um+JMPkqbySkBOpbvQTjMGRiYm31YIZFhXQopc3:yBluvgRiYh6LQoq3
Malware Config
Signatures
Files
-
d564a821dfdfc36373b882abb67020d7b308779b4d2718cafad176110063bb5c.exe windows x86
617aba6aea4a89048933805ef3859feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExA
CreateProcessA
Sleep
WinExec
GetTempFileNameA
SetFileTime
GetTickCount
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTempPathA
advapi32
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService
msvcrt
strrchr
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
memset
_stricmp
rand
srand
_snprintf
shlwapi
SHSetValueA
SHDeleteValueA
setupapi
SetupIterateCabinetA
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 992B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ