Static task
static1
Behavioral task
behavioral1
Sample
8156183857db17713dcb740a8bd29289bc82b015760ce160cf08cfc538580e19.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8156183857db17713dcb740a8bd29289bc82b015760ce160cf08cfc538580e19.exe
Resource
win10v2004-20220901-en
General
-
Target
8156183857db17713dcb740a8bd29289bc82b015760ce160cf08cfc538580e19
-
Size
259KB
-
MD5
93bff4b209e3a7652bcec3ee86e312f8
-
SHA1
661a6c8274c4f29c71fd1db57f4772b8dda32176
-
SHA256
8156183857db17713dcb740a8bd29289bc82b015760ce160cf08cfc538580e19
-
SHA512
be461360ebee2c55368aa2cf49ca713bc309000e09fbf177f617646082d9e06da13b03b302b47475ff926d719218e6b23dda943a9fb17135b6032bbf9c3dd8ad
-
SSDEEP
6144:+8aswFfUxNk3YryBR5MGQFjRcONmbP35DBeWNcdI:0DF0+u6MGgj+ON8xlevI
Malware Config
Signatures
Files
-
8156183857db17713dcb740a8bd29289bc82b015760ce160cf08cfc538580e19.exe windows x86
3fb54af9f9683a5068daca74e4e2de93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
FindAtomA
ResetEvent
LoadLibraryW
CreateThread
GetComputerNameA
CreateFileA
GetCommandLineW
GetFileAttributesA
GetSystemTime
SetLastError
CloseHandle
HeapCreate
LocalFree
GetDiskFreeSpaceW
TlsGetValue
GetExitCodeProcess
SetEvent
GetModuleHandleA
SuspendThread
advapi32
RegQueryValueA
GetFileSecurityA
GetLengthSid
RegCloseKey
CredFree
RegCreateKeyExA
RegEnumValueA
IsTokenRestricted
GetUserNameW
CloseEventLog
CreateServiceW
RegDeleteKeyA
RegEnumKeyExA
cryptui
WizardFree
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgSelectCA
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ