Static task
static1
Behavioral task
behavioral1
Sample
a813675ece36465bcbd9982026167d349e34f470d878f750ab092576ff09b214.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a813675ece36465bcbd9982026167d349e34f470d878f750ab092576ff09b214.exe
Resource
win10v2004-20220812-en
General
-
Target
a813675ece36465bcbd9982026167d349e34f470d878f750ab092576ff09b214
-
Size
323KB
-
MD5
10d5e39099426cdafecbbe824b454fd6
-
SHA1
3964c890430bd47b01a8b6825bdb51669b0d6de2
-
SHA256
a813675ece36465bcbd9982026167d349e34f470d878f750ab092576ff09b214
-
SHA512
f2906b07e7549fc7169c2b42be4b3712d7641c4745626eb44851b32bc6a25fbc02d86a1347f08677cfec6a7acc1c85a9f1a979cc79512e26528c7e0be2545460
-
SSDEEP
6144:YMpBgpXncwU6dwCz5nReZU87/iIb2Npr1eA3kzufyZf1Zo1JBd:YMHghxWClnLIb2Lh70zC+ZoXBd
Malware Config
Signatures
Files
-
a813675ece36465bcbd9982026167d349e34f470d878f750ab092576ff09b214.exe windows x86
7aba30dccf29ece645c34b84c84ad906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
GetExitCodeProcess
HeapCreate
SetLastError
FindAtomA
CloseHandle
GetCommandLineW
lstrlenA
GetSystemTime
GetTickCount
GetDriveTypeA
CreateThread
GetModuleHandleA
GetFileAttributesA
LocalFree
LoadLibraryA
SetEvent
CreateFileA
GetComputerNameA
ResumeThread
advapi32
IsTokenRestricted
RegCloseKey
RegEnumValueA
CreateServiceA
FreeSid
GetFileSecurityA
GetUserNameA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
GetLengthSid
RegQueryValueA
CloseEventLog
dsprop
FindSheet
ReportError
CheckADsError
ErrMsg
MsgBox
sysdm.cpl
NoExecuteRemoveFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ