Static task
static1
Behavioral task
behavioral1
Sample
5b88ab0ae202371b2674bae30b5990cd251d0ade5f150d35183b76ec0679353b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b88ab0ae202371b2674bae30b5990cd251d0ade5f150d35183b76ec0679353b.exe
Resource
win10v2004-20221111-en
General
-
Target
5b88ab0ae202371b2674bae30b5990cd251d0ade5f150d35183b76ec0679353b
-
Size
141KB
-
MD5
111f8ce04190e0adf3cc44ebafb3cf45
-
SHA1
c3ec46cebff6a4aababd224f68606a918741e46b
-
SHA256
5b88ab0ae202371b2674bae30b5990cd251d0ade5f150d35183b76ec0679353b
-
SHA512
b13ddfb07f804134ad2efa1a4fba7601e54a1e4977ac0030a8114ebc1da228e5656ce9ec87a56cc3aaa9550f1ef96c210648402889914a015b137d6749ac9ee5
-
SSDEEP
3072:X/MQB3CqPErSGuOBicos4vwlGNhB4e3NNKv6OEXM:0Q1Mh61vwIhTWv6OEXM
Malware Config
Signatures
Files
-
5b88ab0ae202371b2674bae30b5990cd251d0ade5f150d35183b76ec0679353b.exe windows x86
1f9a9ae09be6223087a483b4f1eb79c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AreAllAccessesGranted
RevertToSelf
RegQueryInfoKeyA
RegSetValueW
RegSetKeySecurity
AddAccessDeniedAce
SystemFunction001
kernel32
VirtualAlloc
GetConsoleTitleA
SetConsoleInputExeNameA
GetCalendarInfoA
gdi32
GetObjectType
SetICMProfileW
OffsetWindowOrgEx
Sections
.idata Size: 96KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ