Static task
static1
Behavioral task
behavioral1
Sample
55aa300da031a95a056b8a4cfd21045fcd8d8ca48add553a209574c64f70fe4f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
55aa300da031a95a056b8a4cfd21045fcd8d8ca48add553a209574c64f70fe4f.exe
Resource
win10v2004-20221111-en
General
-
Target
55aa300da031a95a056b8a4cfd21045fcd8d8ca48add553a209574c64f70fe4f
-
Size
499KB
-
MD5
f4e11aa10293953a4b907fa85ec21a4a
-
SHA1
78dc9b79893128fdeec64b7533014f762c2ca5bc
-
SHA256
55aa300da031a95a056b8a4cfd21045fcd8d8ca48add553a209574c64f70fe4f
-
SHA512
eca094066e352ecdc74acb872956cb6812ccef4d9fcf73b1c14501ef2886b644f19e32526ba2a5a98f6f8c0a11ca37990ae3e91e42ac40b2f02ab0c49636db4e
-
SSDEEP
6144:B16XkyYfwi9xE31QlXEDyk+OOvCeE7JiR3EZFjf2a119ILlhKe+TP:ePmwgoG9EDyEaVE7kEHjfR112Llhx+
Malware Config
Signatures
Files
-
55aa300da031a95a056b8a4cfd21045fcd8d8ca48add553a209574c64f70fe4f.exe windows x86
1f2cfc256a59dd04df447daa9f2308e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
TlsAlloc
PulseEvent
GetModuleHandleA
IsBadStringPtrA
CancelIo
GetStartupInfoA
SuspendThread
ReleaseMutex
HeapCreate
GetStdHandle
lstrlenA
TlsGetValue
GetDriveTypeA
GetACP
IsDebuggerPresent
GetEnvironmentVariableA
CreateFileMappingA
GetModuleFileNameA
CreateFileA
advapi32
IsTextUnicode
IsValidSecurityDescriptor
CreateServiceW
IsValidSid
RegEnumKeyA
RegDeleteValueA
IsValidAcl
ClearEventLogW
ControlService
RegCreateKeyExW
InitializeSid
CreateProcessAsUserA
RegQueryValueW
usbui
USBErrorHandler
USBErrorHandler
USBErrorHandler
USBErrorHandler
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ