Static task
static1
Behavioral task
behavioral1
Sample
884b308d2548e5431c3191d336f559cdaa229d96a13921f053f6d3313a76ba0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
884b308d2548e5431c3191d336f559cdaa229d96a13921f053f6d3313a76ba0a.exe
Resource
win10v2004-20220812-en
General
-
Target
884b308d2548e5431c3191d336f559cdaa229d96a13921f053f6d3313a76ba0a
-
Size
773KB
-
MD5
ac68e396262333ec227014abfcfa0e61
-
SHA1
5b4eabadbc0792850284efdab6cd6e4b642659b5
-
SHA256
884b308d2548e5431c3191d336f559cdaa229d96a13921f053f6d3313a76ba0a
-
SHA512
167329eef6fd7e878cb943e9b2bd877fa499dde159365642a6385b0cb7408bd8d3b169f163a0747ea6f6a49c9664fe98a99eb7c4a6162a533402ca664b2580b9
-
SSDEEP
12288:4TYOlKbMn51Rq5Axkni/pcc9IMlfqQeOC2fDoFN/EjVJlxh5dEF+vyEWXuo4v:oxP1R+kiisQw2fDw/6dytD4
Malware Config
Signatures
Files
-
884b308d2548e5431c3191d336f559cdaa229d96a13921f053f6d3313a76ba0a.exe windows x86
97ea3d54a6de5ee7ecef1c3554832f40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleFileNameW
CloseHandle
SetConsoleCP
GetCommandLineA
lstrlenW
GetTimeFormatA
GetTickCount
VirtualProtect
OpenMutexA
HeapCreate
Sleep
CreateEventA
ReleaseMutex
SetEvent
HeapDestroy
CloseHandle
DeleteFileA
GetStartupInfoA
ResumeThread
advapi32
RegDeleteValueA
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
ClearEventLogW
IsValidAcl
ControlService
RegQueryValueW
InitializeSid
RegEnumKeyA
CreateServiceW
CreateProcessAsUserA
IsTextUnicode
msvcirt
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ