Static task
static1
Behavioral task
behavioral1
Sample
db6bdcdb5566b18d0a7312152fda0dc249f721c2ff91a80cc0740a5046cd74d0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db6bdcdb5566b18d0a7312152fda0dc249f721c2ff91a80cc0740a5046cd74d0.exe
Resource
win10v2004-20220812-en
General
-
Target
db6bdcdb5566b18d0a7312152fda0dc249f721c2ff91a80cc0740a5046cd74d0
-
Size
101KB
-
MD5
04f189cbd3992036c3072c4ae6a76688
-
SHA1
a9d9676b41be214da872db010fb9388f72e8eb05
-
SHA256
db6bdcdb5566b18d0a7312152fda0dc249f721c2ff91a80cc0740a5046cd74d0
-
SHA512
eb0fae611555510914fbd8b49fa3b41a94f857312e8dcef52fe3163c2e0771ab8f4ca8f63c3e9600dc5cce8351f4475d510ba8362b9edaa91af7502792648362
-
SSDEEP
1536:5b9U0eZT2yNqgK1f5mySpm/Z+rxIkfBTo4BiMvrpmTjw6H+kM2B+ieB6:3UTT2MqRTmRpmBSIkfBTo4JDpg+ETu
Malware Config
Signatures
Files
-
db6bdcdb5566b18d0a7312152fda0dc249f721c2ff91a80cc0740a5046cd74d0.exe windows x86
2eea605aa7b250cd480826ac4f6127aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
lstrlenA
GetTimeFormatW
GetCommandLineA
CloseHandle
GetFileAttributesA
VirtualQuery
EnumResourceTypesA
GetStartupInfoA
GetConsoleTitleA
HeapDestroy
GetEnvironmentVariableA
TlsGetValue
GetDriveTypeW
SetLastError
GetModuleHandleA
GetCommandLineA
CreateEventW
CloseHandle
GlobalFlags
advapi32
IsValidAcl
IsValidSid
InitializeSid
IsValidSid
IsValidSid
RegCreateKeyExW
RegDeleteValueA
IsValidSecurityDescriptor
RegQueryValueW
CreateProcessAsUserA
RegEnumKeyA
IsValidSid
IsValidSid
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snrgato Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE