Static task
static1
Behavioral task
behavioral1
Sample
67b4d0f713c55894ef9e9791f88d2ff31d3ec66a693b6d75732ef4e9d428b302.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67b4d0f713c55894ef9e9791f88d2ff31d3ec66a693b6d75732ef4e9d428b302.exe
Resource
win10v2004-20221111-en
General
-
Target
67b4d0f713c55894ef9e9791f88d2ff31d3ec66a693b6d75732ef4e9d428b302
-
Size
28KB
-
MD5
0e6b3eb86665546b17322644f699af6b
-
SHA1
3c1fa3b68cb7d3b439f90c0f7fc2327b4d175426
-
SHA256
67b4d0f713c55894ef9e9791f88d2ff31d3ec66a693b6d75732ef4e9d428b302
-
SHA512
7e8dcd1edf26657451a9689578cc70afc86136f637b8541b1e012da1fcfe9f10afd1f51bd5cdb4bff0c0308ca8f27c55bccd7dc5ba1ac4453175cd78baaa46d1
-
SSDEEP
192:jIPS6F22hF7ablidNpYWOP1oyn9nbDnkFitwvLlTjyooJppSQsDaM/OyK:MPhEkXpB41bnbDWMoobpSQzURK
Malware Config
Signatures
Files
-
67b4d0f713c55894ef9e9791f88d2ff31d3ec66a693b6d75732ef4e9d428b302.exe windows x86
5a230d4264d1b8135ec3cc0c8c6886ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
CreateFileA
GetModuleHandleA
OpenEventA
GetLastError
VirtualQuery
FormatMessageA
SetErrorMode
SetFilePointer
CloseHandle
WriteFile
Sleep
GetModuleFileNameA
GetStartupInfoA
SetUnhandledExceptionFilter
LoadLibraryA
user32
MessageBeep
MessageBoxA
LoadStringA
wsprintfA
wvsprintfA
advapi32
StartServiceA
OpenServiceA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
QueryServiceStatus
CloseServiceHandle
msvcrt
_XcptFilter
_acmdln
__getmainargs
exit
_mbsrchr
_mbsicmp
strstr
_strlwr
__dllonexit
_onexit
_exit
__setusermatherr
_controlfp
_initterm
__set_app_type
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ