Static task
static1
Behavioral task
behavioral1
Sample
686dabdb737cd3924215d392a147fc10c79169f9582a6ae2eeae1d6d615fdcda.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
686dabdb737cd3924215d392a147fc10c79169f9582a6ae2eeae1d6d615fdcda.exe
Resource
win10v2004-20220812-en
General
-
Target
686dabdb737cd3924215d392a147fc10c79169f9582a6ae2eeae1d6d615fdcda
-
Size
305KB
-
MD5
1456fd045af55cea434f06b5c66e723d
-
SHA1
91cebc1a6d7dede49eca71c2872a3fff22935d0e
-
SHA256
686dabdb737cd3924215d392a147fc10c79169f9582a6ae2eeae1d6d615fdcda
-
SHA512
df83e5da7ca153a41b9489765f88888f75f8713c4427b26706b4b54797dc738eb772de4c1b1e4faa1601988e6bc717e34228b47b7428a1c36979ee71d76433be
-
SSDEEP
6144:zAcKVjOjPNXGs1uyL2FZl/0S914t9mK+piM5yeFGg7Ql5/5d:zAcqAPNWs1uyLSZl/0SNawcBd
Malware Config
Signatures
Files
-
686dabdb737cd3924215d392a147fc10c79169f9582a6ae2eeae1d6d615fdcda.exe windows x86
956e61e0e402be36081a7146d30b2f70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetPrivateProfileIntW
ResetEvent
ReleaseMutex
CloseHandle
GlobalFree
CreateMutexA
LocalFree
CreateEventW
VirtualAllocEx
GetStdHandle
lstrlenA
SuspendThread
LocalSize
GetCommandLineW
GetSystemInfo
LoadLibraryW
WriteFile
GetEnvironmentVariableW
InterlockedExchange
advapi32
RegEnumKeyW
RegQueryValueW
IsValidSid
RegCloseKey
RegDeleteValueA
IsTextUnicode
ClearEventLogW
InitializeSid
CreateServiceA
IsValidSecurityDescriptor
RegCreateKeyExW
CloseEventLog
ControlService
devenum
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ