Static task
static1
Behavioral task
behavioral1
Sample
27fb67a89cc8d0450dba11cdee64d5761d8931ff034e3b8bed62cba55fc605fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27fb67a89cc8d0450dba11cdee64d5761d8931ff034e3b8bed62cba55fc605fc.exe
Resource
win10v2004-20220812-en
General
-
Target
27fb67a89cc8d0450dba11cdee64d5761d8931ff034e3b8bed62cba55fc605fc
-
Size
122KB
-
MD5
056823ce33b70d6f88574997744c9320
-
SHA1
6cb063e8c7f557426652b264ddd4068cf7d0bc0c
-
SHA256
27fb67a89cc8d0450dba11cdee64d5761d8931ff034e3b8bed62cba55fc605fc
-
SHA512
fec4503a9f34da3623df2f5aa4872c84563602cb7562e3fd0a7f575cd58083273de9d879c305efe77188d59f64952b44b4affac870cc3a950fdf9930311d3a37
-
SSDEEP
3072:BCflOgMfgs5+oOgMfgs5UoOgMfgs5YoH7ESz5f2mu:BOlhds9hds/hdstHVN+mu
Malware Config
Signatures
Files
-
27fb67a89cc8d0450dba11cdee64d5761d8931ff034e3b8bed62cba55fc605fc.exe windows x86
4840fed75f3ec84e295f96ca41897373
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetCurrentProcess
DuplicateHandle
SizeofResource
CopyFileA
GetModuleFileNameA
LoadResource
CreateFileA
WriteFile
CloseHandle
CreateProcessA
Sleep
OpenProcess
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
msvcrt
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strrev
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE