Static task
static1
Behavioral task
behavioral1
Sample
576bf5c98eed90dbfd989ed2e402a1840adfc947c87070e2295e2de3f4160df8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
576bf5c98eed90dbfd989ed2e402a1840adfc947c87070e2295e2de3f4160df8.exe
Resource
win10v2004-20220812-en
General
-
Target
576bf5c98eed90dbfd989ed2e402a1840adfc947c87070e2295e2de3f4160df8
-
Size
928KB
-
MD5
3b045bae150c20edee2622e74dc1b650
-
SHA1
d4321c3348aa9c70142d7efcc0a5352fa713e056
-
SHA256
576bf5c98eed90dbfd989ed2e402a1840adfc947c87070e2295e2de3f4160df8
-
SHA512
d6e01245e65437873914cc5902cef8fa828c9f421b5285edf4ed7ad9f812ada17174688e68ce722d8da8160d65316dede9dd83c119321a38be04f05999ea448b
-
SSDEEP
6144:ZyiZpxmwUa8QsCRHvU0nnFBy8uTJeX+caU5hym47ZpUUe0nuWs15kpPx6HskSNgN:Zyi5mwUadsHAFU8e6g7uBKwsk28
Malware Config
Signatures
Files
-
576bf5c98eed90dbfd989ed2e402a1840adfc947c87070e2295e2de3f4160df8.exe windows x86
cc209e4ce2bff6d197570dc76b693ed0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetConsoleTitleA
ResetEvent
GetEnvironmentVariableA
GetTimeFormatA
CloseHandle
CancelIo
CreateEventA
GetDriveTypeA
GetVolumePathNameA
HeapCreate
TlsGetValue
VirtualQuery
lstrlenA
HeapDestroy
GetCommandLineA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
DeleteFileW
advapi32
ClearEventLogW
RegDeleteValueA
IsTextUnicode
ControlService
IsValidAcl
IsValidSid
RegQueryValueW
RegEnumKeyA
IsValidSecurityDescriptor
RegCreateKeyExW
InitializeSid
CreateServiceW
CreateProcessAsUserA
rastapi
PortClearStatistics
PortClearStatistics
PortClearStatistics
PortClearStatistics
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 394KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ