Static task
static1
Behavioral task
behavioral1
Sample
a170f10a22bfa6fb8b4d98d6f0597dae225bfed230f6cb00cecfec14444b9d49.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a170f10a22bfa6fb8b4d98d6f0597dae225bfed230f6cb00cecfec14444b9d49.exe
Resource
win10v2004-20221111-en
General
-
Target
a170f10a22bfa6fb8b4d98d6f0597dae225bfed230f6cb00cecfec14444b9d49
-
Size
870KB
-
MD5
795b8a00214dd2b21ee973056bc4e05d
-
SHA1
3dd4d3b273881046855a650277e1d7baeee92525
-
SHA256
a170f10a22bfa6fb8b4d98d6f0597dae225bfed230f6cb00cecfec14444b9d49
-
SHA512
83216415eb6d7bee5a9a53267e025db0e8ceda56bb8e9e6f011608951717f5a68a9407239d3de928411341fa076dda228423ed6e182bad79aa686bf3a2e88a28
-
SSDEEP
12288:+fxl9VifUBomrWEUicFHbZbYmq02YEve5wuqYeNwwcFbP+4GdXHod99LXBMm4s2x:+fb+YqkMHbUv0qYnwWtvdbVQ
Malware Config
Signatures
Files
-
a170f10a22bfa6fb8b4d98d6f0597dae225bfed230f6cb00cecfec14444b9d49.exe windows x86
58c1ad652fe432af419df46256c613a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CancelIo
SetLastError
GetModuleFileNameA
CreateFileA
GetStdHandle
ReleaseMutex
GetStartupInfoA
CreateFileMappingA
HeapDestroy
ResetEvent
GetEnvironmentVariableA
SetEvent
IsBadCodePtr
GetModuleHandleA
TlsGetValue
lstrlenA
HeapCreate
TlsAlloc
GetCommandLineW
advapi32
RegEnumKeyA
CreateProcessAsUserA
RegDeleteValueA
ClearEventLogW
IsValidSid
IsValidAcl
IsTextUnicode
IsValidSecurityDescriptor
ControlService
RegQueryValueW
RegCreateKeyExW
CreateServiceW
InitializeSid
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE