Static task
static1
Behavioral task
behavioral1
Sample
919a141f8e0582ba8a7423594ce6524eb4b75ca0ab5bfced1b26af05a1e8c505.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
919a141f8e0582ba8a7423594ce6524eb4b75ca0ab5bfced1b26af05a1e8c505.exe
Resource
win10v2004-20220812-en
General
-
Target
919a141f8e0582ba8a7423594ce6524eb4b75ca0ab5bfced1b26af05a1e8c505
-
Size
603KB
-
MD5
b974c2cb3ce936ccab7bbf8bba593f38
-
SHA1
4d9d46e9bff3fa865f31b24d7cf64206eb543580
-
SHA256
919a141f8e0582ba8a7423594ce6524eb4b75ca0ab5bfced1b26af05a1e8c505
-
SHA512
c4170c9de4519c002d3cfcba2c223d2d53fd4ae9f3fd66153b15820151fc6c90f888a146f2841234c99f56e3b113f2c1cca80f7e000199ac8abf100b56b86765
-
SSDEEP
12288:yEVDL2QSVkEgqCLabW+F6KAkUwrFSPF/lMQ:yMLAkCXYKAkU8FWF9MQ
Malware Config
Signatures
Files
-
919a141f8e0582ba8a7423594ce6524eb4b75ca0ab5bfced1b26af05a1e8c505.exe windows x86
987ad4daee58562ac504dcc5543f1841
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
atl
AtlAdvise
dhcpsapi
DhcpAuditLogSetParams
DhcpCreateClass
DhcpCreateClientInfo
DhcpCreateClientInfoV4
DhcpCreateOption
DhcpCreateOptionV5
DhcpCreateSubnet
DhcpDeleteClass
DhcpDeleteClientInfo
DhcpDeleteMClientInfo
DhcpDeleteMScope
DhcpDeleteServer
DhcpDeleteSubnet
DhcpDeleteSuperScopeV4
DhcpDsCleanup
DhcpDsClearHostServerEntries
DhcpDsInit
DhcpEnumClasses
DhcpEnumMScopeClients
DhcpEnumMScopeElements
DhcpEnumMScopes
DhcpEnumOptionValues
DhcpEnumOptionValuesV5
DhcpEnumOptions
DhcpEnumOptionsV5
DhcpEnumServers
DhcpEnumSubnetClients
DhcpEnumSubnetClientsV4
DhcpEnumSubnetClientsV5
DhcpEnumSubnetElements
DhcpEnumSubnetElementsV4
kernel32
AllocConsole
_lopen
GetEnvironmentVariableA
GetTickCount
DebugActiveProcess
AllocConsole
GetPrivateProfileStringA
IsBadWritePtr
GetCommandLineW
lz32
LZRead
msacm32
XRegThunkEntry
acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
advpack
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
AddDelBackupEntry
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 274KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 546KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE