Static task
static1
Behavioral task
behavioral1
Sample
5ffdc8ebc61c6cac8b719c5f20fc526dc7bf17ae8a67d15bf12eaad0577f98a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ffdc8ebc61c6cac8b719c5f20fc526dc7bf17ae8a67d15bf12eaad0577f98a5.exe
Resource
win10v2004-20220901-en
General
-
Target
5ffdc8ebc61c6cac8b719c5f20fc526dc7bf17ae8a67d15bf12eaad0577f98a5
-
Size
823KB
-
MD5
821ef4d0102138500f8badc37a8f8efd
-
SHA1
c3620cb9b88af15225d8400029f4e97ceaffcd19
-
SHA256
5ffdc8ebc61c6cac8b719c5f20fc526dc7bf17ae8a67d15bf12eaad0577f98a5
-
SHA512
ae4832c05404e80ea2159f6ef9e71a8d1f6521ca6b77f5386aac20685e17acb2f1327f14b13fd5ef90a52c6c2ca346e70b91eb16864123445130341a3d581911
-
SSDEEP
12288:2QMJNRmKeRKMbxvStCPlh7iS4ugJR22TeyNLrG8bW+Rqxxp5q5Sqw1EVXHpYDlOj:2QMTFeRbx6qhu/JLI+Rqp5SkOsXq
Malware Config
Signatures
Files
-
5ffdc8ebc61c6cac8b719c5f20fc526dc7bf17ae8a67d15bf12eaad0577f98a5.exe windows x86
c10abb1b57237413e2cdd73a660335cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
InterlockedExchange
lstrlenA
CloseHandle
GetModuleHandleW
GetCommandLineA
ResetEvent
GetExitCodeProcess
CreateMutexA
WriteFile
GetStdHandle
ResumeThread
LocalFree
GlobalFree
GetACP
GetEnvironmentVariableW
GetPrivateProfileIntW
HeapCreate
CreateEventA
GlobalSize
advapi32
CloseEventLog
CreateServiceA
RegCloseKey
ClearEventLogW
IsValidSid
RegQueryValueW
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyW
IsValidSecurityDescriptor
RegDeleteValueA
ControlService
IsTextUnicode
btpanui
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 813KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ