Static task
static1
Behavioral task
behavioral1
Sample
2279fb4e156d949a63213f531050c20c77e13ecd22e090af5c4aa2df177932ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2279fb4e156d949a63213f531050c20c77e13ecd22e090af5c4aa2df177932ea.exe
Resource
win10v2004-20220901-en
General
-
Target
2279fb4e156d949a63213f531050c20c77e13ecd22e090af5c4aa2df177932ea
-
Size
45KB
-
MD5
309f3ac5dfd99ce666dc6090ec673040
-
SHA1
911f2031bb6819d1b74771dbcfabd8f71aaf0c68
-
SHA256
2279fb4e156d949a63213f531050c20c77e13ecd22e090af5c4aa2df177932ea
-
SHA512
16faf236d3b7070d58f2e3a4e7065496f62462339ce56e7a0bcbcfe5aa077bfa7da088a8dd834ef830d6f3c2895db77033ab8f99971969bb8e1f3d62748a4ac0
-
SSDEEP
768:LufAsdYrJHDtLX/9uknwK+4jMDykvj9efEV6aFi8RCk74C+:kAsdolp7/LLAyAIaFngn
Malware Config
Signatures
Files
-
2279fb4e156d949a63213f531050c20c77e13ecd22e090af5c4aa2df177932ea.exe windows x86
960dbc72d0d4e008a52bf145749e9caf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FreeConsole
ResetEvent
GetModuleHandleA
IsBadStringPtrA
CloseHandle
SetLastError
GetLastError
EnumResourceTypesW
CancelIo
Heap32First
LoadLibraryExW
VirtualProtect
SetLocalTime
IsBadReadPtr
TlsGetValue
GetCommandLineA
GetLogicalDrives
GetDiskFreeSpaceExA
FindClose
advapi32
RegQueryValueA
CloseEventLog
GetFileSecurityW
RegCloseKey
LsaFreeMemory
RegEnumKeyExA
RegDeleteKeyA
GetLengthSid
RegEnumValueA
FreeSid
IsTokenUntrusted
RegCreateKeyExA
LsaClose
RegCloseKey
hnetcfg
DllGetClassObject
HNetFreeSharingServicesPage
HNetGetSharingServicesPage
DllRegisterServer
HNetDeleteRasConnection
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ