Static task
static1
Behavioral task
behavioral1
Sample
c627e4ab8329f714dbcb33593b7111d03c5301e146d3db0acceee8e2ca3aa697.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c627e4ab8329f714dbcb33593b7111d03c5301e146d3db0acceee8e2ca3aa697.exe
Resource
win10v2004-20220812-en
General
-
Target
c627e4ab8329f714dbcb33593b7111d03c5301e146d3db0acceee8e2ca3aa697
-
Size
261KB
-
MD5
165841cfae2dd6ed19cf4621bb751a42
-
SHA1
bb18a6909409f1905b3dbb4fea5f416d70dfe0cb
-
SHA256
c627e4ab8329f714dbcb33593b7111d03c5301e146d3db0acceee8e2ca3aa697
-
SHA512
74debdbd6e08fae24d8b32641eccdcbf815ac43b5a1c03ae3b5b0681767e45ba733d5c3b37b1858bd01ea45146208dedd44181570e04e224dc97f847e5b27d03
-
SSDEEP
6144:ghpJ48mvrrKHKDMPiRKy7Nqrur3fjyhIXdQqR2G1iMBs6RueBCJj6pV:gdqrrxM7y7Eiq2yjyiQstp6L
Malware Config
Signatures
Files
-
c627e4ab8329f714dbcb33593b7111d03c5301e146d3db0acceee8e2ca3aa697.exe windows x86
388f4743f366727651dc37cc82da8caf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__pioinfo
_lock
towlower
memset
_onexit
rpcrt4
RpcBindingSetOption
advapi32
EnableTrace
InitializeAcl
StartServiceW
UnregisterTraceGuids
AllocateAndInitializeSid
RegCloseKey
CryptReleaseContext
kernel32
UnmapViewOfFile
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
Sleep
SetPriorityClass
WriteFile
VirtualAlloc
OpenEventW
HeapDestroy
EnterCriticalSection
InterlockedDecrement
ntdll
NtQueryInformationProcess
RtlCreateTimer
RtlExitUserThread
RtlCompareMemory
ZwOpenEvent
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ