Static task
static1
Behavioral task
behavioral1
Sample
56bd57b0b015fdbee24774534ac247470c6ff03da9082bf4719f4153a31e904c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56bd57b0b015fdbee24774534ac247470c6ff03da9082bf4719f4153a31e904c.exe
Resource
win10v2004-20220901-en
General
-
Target
56bd57b0b015fdbee24774534ac247470c6ff03da9082bf4719f4153a31e904c
-
Size
40KB
-
MD5
81e6da573527cacb8a0df9827182355d
-
SHA1
76b9d56cab8a26a532e7505655037e50f1db2302
-
SHA256
56bd57b0b015fdbee24774534ac247470c6ff03da9082bf4719f4153a31e904c
-
SHA512
afac9d2fcc3253fe8cd34a932550fd2d642533722bf8a4cae68938257507b7166e00d18ab679244342d9fe2cb7e9fb2b6ad6332d2a75b5a2c5c04c5772e2a540
-
SSDEEP
384:IGXuSMYcty18FuF1lcuhirL9TG6SaE6npmlDx7L3XycqyRV3+C2merCljGOB:1i01S2lcyaG606nwL3XyFwYG3TB
Malware Config
Signatures
Files
-
56bd57b0b015fdbee24774534ac247470c6ff03da9082bf4719f4153a31e904c.exe windows x86
cbca1af9aa6cfa046b172f08ceaf6165
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
FlushFileBuffers
WideCharToMultiByte
SetLastError
lstrlenA
GetTickCount
GetLastError
GetModuleFileNameA
CreateEventA
LoadLibraryA
GetProcAddress
WaitForSingleObject
SetEvent
ExitProcess
Sleep
CreateToolhelp32Snapshot
Process32First
GetCurrentProcessId
OpenProcess
GetExitCodeProcess
TerminateProcess
CloseHandle
Process32Next
SetFilePointer
GetModuleHandleA
GetStartupInfoW
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
SetStdHandle
user32
MessageBoxA
wsprintfA
advapi32
QueryServiceStatus
GetTokenInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
StartServiceA
QueryServiceStatusEx
ControlService
DeleteService
CreateServiceA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetServiceStatus
OpenSCManagerA
OpenServiceA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE