Static task
static1
Behavioral task
behavioral1
Sample
c75603d29c73c04f7bd627356b3fa928fc7e5b3ba5be8d0f7a18a9326541ed88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c75603d29c73c04f7bd627356b3fa928fc7e5b3ba5be8d0f7a18a9326541ed88.exe
Resource
win10v2004-20221111-en
General
-
Target
c75603d29c73c04f7bd627356b3fa928fc7e5b3ba5be8d0f7a18a9326541ed88
-
Size
215KB
-
MD5
155774c89396384276ec60b2602d9b30
-
SHA1
698db80d8b134f475335291fc1c8f36d442adc7e
-
SHA256
c75603d29c73c04f7bd627356b3fa928fc7e5b3ba5be8d0f7a18a9326541ed88
-
SHA512
976a77c2857fcddd77dce550959d95aec4ae6c2527d7d6f5a818923b6f11d6ebab2129cb2fb0a5b0e2ccfe79fab7ec09d264a716ff152e50b2f691e1dd25b261
-
SSDEEP
6144:S4aVYfFL3RCxU4ryiYBE+EJR5WkR1O58Xqoye2y+n:KVykxUoFAkXO5v7n
Malware Config
Signatures
Files
-
c75603d29c73c04f7bd627356b3fa928fc7e5b3ba5be8d0f7a18a9326541ed88.exe windows x86
10bdab2e7aa9257d86aea72509147bff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
scecli
SceCloseProfile
SceAnalyzeSystem
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceBrowseDatabaseTable
SceAddToObjectList
kernel32
lstrcmpA
LoadLibraryW
GetLocaleInfoA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocalTime
GetCurrentProcess
CloseHandle
SetLastError
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateFileA
SystemTimeToFileTime
GetOEMCP
FindResourceA
GetTickCount
HeapAlloc
HeapFree
QueryPerformanceCounter
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 8KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ