Static task
static1
Behavioral task
behavioral1
Sample
67c4121e57950152a7fd18b089c16f5bebe769031d987e9dd3eff3795db613bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67c4121e57950152a7fd18b089c16f5bebe769031d987e9dd3eff3795db613bf.exe
Resource
win10v2004-20220812-en
General
-
Target
67c4121e57950152a7fd18b089c16f5bebe769031d987e9dd3eff3795db613bf
-
Size
304KB
-
MD5
9ce09c489f1e2a262f555ed76863aafd
-
SHA1
a3dd80e3a3fe3ae1d6698d1c2f0114ab9c72b743
-
SHA256
67c4121e57950152a7fd18b089c16f5bebe769031d987e9dd3eff3795db613bf
-
SHA512
7a374b6f36f3d6384b9f820859f40efaa6f257fe5849edebed46b3aa12b64cb5ecb0d4de79ce86778bf2f4203a2f99051da75ea2626cc418d8af4a1889aac652
-
SSDEEP
6144:U56KM4N5FCXUhvYHW+rn2AWB+nJYPZudyeSgF6Bw37SfAf:oQaaUhALrn2HBuJIiyevQi37UAf
Malware Config
Signatures
Files
-
67c4121e57950152a7fd18b089c16f5bebe769031d987e9dd3eff3795db613bf.exe windows x86
f41e753ebe793db3b425d7160f479252
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
FindVolumeClose
VirtualAlloc
GetPrivateProfileIntW
GetExitCodeProcess
LocalFree
GetModuleHandleW
GetEnvironmentVariableW
ResetEvent
CreateMutexA
lstrlenA
WriteFile
GlobalSize
InterlockedExchange
GetCommandLineA
ResumeThread
CloseHandle
GetACP
GetStdHandle
CreateEventA
advapi32
CloseEventLog
RegCreateKeyExW
RegDeleteKeyA
CreateServiceA
RegCloseKey
RegQueryValueW
RegDeleteValueA
IsTextUnicode
IsValidAcl
ControlService
IsValidSid
ClearEventLogA
RegEnumKeyW
amstream
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllGetClassObject
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ