Static task
static1
Behavioral task
behavioral1
Sample
3acf989176254b7d3b8ee6652fe8d02e1676acf195de051a4eb1e753ff5b5215.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3acf989176254b7d3b8ee6652fe8d02e1676acf195de051a4eb1e753ff5b5215.exe
Resource
win10v2004-20220812-en
General
-
Target
3acf989176254b7d3b8ee6652fe8d02e1676acf195de051a4eb1e753ff5b5215
-
Size
773KB
-
MD5
130123eaad73880ff8caa64f28896bef
-
SHA1
3509da8d59c653a3deb73651d2e3f04c06abfa0d
-
SHA256
3acf989176254b7d3b8ee6652fe8d02e1676acf195de051a4eb1e753ff5b5215
-
SHA512
9c47a7172403262744dfa545d825b4637a64d7f8c91b7ebd5ac0258801453ddfe5fb0ef9916b7fd6c2912dd3cdcbeee7af2edc7a3698aa8f04d37b990df3635e
-
SSDEEP
24576:dM3q+CdE1j45mogw/3gVMdQZTxc/h01hF:q3qz2amogw/QVZZTmKh
Malware Config
Signatures
Files
-
3acf989176254b7d3b8ee6652fe8d02e1676acf195de051a4eb1e753ff5b5215.exe windows x86
fd039763edc499774a39583d095e77e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
DeleteFileA
VirtualQueryEx
Sleep
CloseHandle
HeapCreate
ReleaseMutex
GetTimeFormatA
GetCommandLineA
OpenMutexW
CloseHandle
SetEvent
GetTickCount
ResumeThread
lstrlenW
CreateEventA
GetModuleHandleA
HeapDestroy
GetStartupInfoA
FindResourceA
advapi32
RegQueryValueW
RegCreateKeyExW
ControlService
IsValidSecurityDescriptor
ClearEventLogW
IsTextUnicode
RegEnumKeyA
InitializeSid
IsValidSid
CreateProcessAsUserA
IsValidAcl
RegDeleteValueA
CreateServiceW
ntlanman
NPOpenEnum
NPOpenEnum
NPOpenEnum
NPOpenEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ