Static task
static1
Behavioral task
behavioral1
Sample
0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5.exe
Resource
win10v2004-20220812-en
General
-
Target
0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
-
Size
572KB
-
MD5
9051b557b61558ec0e2170e1f8ee7490
-
SHA1
a906028b8702dc409ca3348826b83a57675dc86f
-
SHA256
0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
-
SHA512
f89d19cf848c833f87afbbd2a57442bb057a4a847bdae7bc2dc2c068bea92b9bb83ca168fac2c90c4bb610a7d3b2e5856a6be5424badfe36d597b185e6119419
-
SSDEEP
12288:HE5adJFAgBv3r+TMP10fWdNHKKWZIe7qM5kN5cEXYUBGc:HBjFAgBv3r+TMP106NqKWZ7qM5kNHXYm
Malware Config
Signatures
Files
-
0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5.exe windows x86
878ad052f4d7e1e5120e968a45b8c3f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleFileNameA
ExpandEnvironmentStringsA
lstrlenA
lstrcpyA
FindResourceA
LoadResource
LockResource
SizeofResource
ExitProcess
LoadLibraryA
lstrcatA
GetLastError
GetModuleHandleA
GetProcAddress
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
advapi32
CloseServiceHandle
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
msvcrt
strchr
memset
fclose
fwrite
fopen
??2@YAPAXI@Z
memcpy
strstr
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_CxxThrowException
__CxxFrameHandler
strlen
_except_handler3
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ