Static task
static1
Behavioral task
behavioral1
Sample
68820d93f443c9587456b6d26a62a8e95aa60a809a92fee19a59f4a36badd9a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68820d93f443c9587456b6d26a62a8e95aa60a809a92fee19a59f4a36badd9a6.exe
Resource
win10v2004-20220812-en
General
-
Target
68820d93f443c9587456b6d26a62a8e95aa60a809a92fee19a59f4a36badd9a6
-
Size
214KB
-
MD5
4705015516468cd67a81a1dea0d197cc
-
SHA1
22e1bc0433ff9b98efce9045c0b010df395401f6
-
SHA256
68820d93f443c9587456b6d26a62a8e95aa60a809a92fee19a59f4a36badd9a6
-
SHA512
06a1235613b4f82ea31d3fd9064cadd0059797215132607e0a4ef89f7af43ac3f9990b6e5a5161517aec18a94223b558b724df1076dfc7933881e195ad213fa9
-
SSDEEP
6144:WD2h/x7TIRN/uS0LpwvJ1gwYSJsOEBPQSog:Wi1x/IySLJ1eSJGdog
Malware Config
Signatures
Files
-
68820d93f443c9587456b6d26a62a8e95aa60a809a92fee19a59f4a36badd9a6.exe windows x86
5f56334151be9a5ca76d032ee18b2040
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
CreateThread
SuspendThread
HeapCreate
GetFileAttributesA
CreateFileA
lstrlenA
GetSystemTime
SetEvent
GetTickCount
GetExitCodeProcess
CloseHandle
GetDriveTypeW
SetLastError
GetDiskFreeSpaceA
GetCommandLineW
FindAtomA
GetModuleHandleA
LocalFree
LoadLibraryW
advapi32
CreateServiceA
IsTokenRestricted
RegEnumValueA
GetLengthSid
RegQueryValueA
GetUserNameA
RegCloseKey
RegEnumKeyExA
CloseEventLog
RegDeleteKeyA
IsValidSid
GetFileSecurityA
RegCreateKeyExA
dsprop
MsgBox
ErrMsg
ReportError
CheckADsError
FindSheet
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ