Static task
static1
Behavioral task
behavioral1
Sample
8ccd5be8d5b95bd263ce54a469b00b41b2d45ae3d5372c8e5d38953cbfc4ea7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ccd5be8d5b95bd263ce54a469b00b41b2d45ae3d5372c8e5d38953cbfc4ea7c.exe
Resource
win10v2004-20221111-en
General
-
Target
8ccd5be8d5b95bd263ce54a469b00b41b2d45ae3d5372c8e5d38953cbfc4ea7c
-
Size
52KB
-
MD5
34415cd51b1f6d23d085c0b52bc3004c
-
SHA1
93b3db8b016a1a0e16f7ee3816c1cac7806304c2
-
SHA256
8ccd5be8d5b95bd263ce54a469b00b41b2d45ae3d5372c8e5d38953cbfc4ea7c
-
SHA512
0ff29ef0610a6a30d9d37e47688938c33519beb40cfd8f83ddaf09bf075917d70795459acba4b9e5ebd9acd6a4c60d64490496ed19373d01f42017ff3f89a515
-
SSDEEP
768:Wgk5LOjI2VEXvhnfhi26aeB+vc7mOEHkYDrtes+u:Wgk9UvshZHPeISEEY3tes+u
Malware Config
Signatures
Files
-
8ccd5be8d5b95bd263ce54a469b00b41b2d45ae3d5372c8e5d38953cbfc4ea7c.exe windows x86
58ac6a240cea312f536b3da12b3fd14d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
Sleep
GetLastError
GetModuleFileNameA
GetModuleHandleA
CreateThread
SetEvent
WaitForMultipleObjects
CreateProcessA
GetWindowsDirectoryA
EnterCriticalSection
LeaveCriticalSection
CreateEventA
WaitForSingleObject
CloseHandle
user32
RegisterDeviceNotificationA
UnregisterDeviceNotification
advapi32
DeleteService
StartServiceCtrlDispatcherA
RegisterEventSourceA
ReportEventA
CreateServiceA
RegCreateKeyA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerExA
RegCloseKey
sti
StiCreateInstanceW
msvcrt
exit
_controlfp
_except_handler3
??3@YAXPAX@Z
sprintf
wcscpy
strncpy
printf
_stricmp
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.. Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE