Static task
static1
Behavioral task
behavioral1
Sample
757ba05e28ae7995c657d75272d7f833eebd15c22115880a2f5fe9c72d121d06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
757ba05e28ae7995c657d75272d7f833eebd15c22115880a2f5fe9c72d121d06.exe
Resource
win10v2004-20221111-en
General
-
Target
757ba05e28ae7995c657d75272d7f833eebd15c22115880a2f5fe9c72d121d06
-
Size
299KB
-
MD5
a7a95e2fd4c4f5791244139c8a6f41d3
-
SHA1
db295fc82e7462cd5373ded5b1ef43857ee77a85
-
SHA256
757ba05e28ae7995c657d75272d7f833eebd15c22115880a2f5fe9c72d121d06
-
SHA512
7caad7a0d43da4be407ba2eae16305e172e174723cc8a89b2b680337d0a33c0c9ea48194152e0e1a8248461b3b5dcc7a2dc266a85a184b61bff27b81c5b56a97
-
SSDEEP
6144:YbsPFdOcub+2lotJeEM0xdOgk4VYW/JmpCW7erphV2Sa2f:8sPFd/uiwot7xIg17IpCWi9hV2
Malware Config
Signatures
Files
-
757ba05e28ae7995c657d75272d7f833eebd15c22115880a2f5fe9c72d121d06.exe windows x86
04e9622506cd293562e766b246da3bc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
SuspendThread
GetStdHandle
GetSystemInfo
LocalFree
GetCommandLineW
CloseHandle
CreateMutexW
GlobalFree
LoadLibraryW
ReleaseMutex
lstrlenA
LocalSize
GetPrivateProfileIntA
WriteFile
FreeConsole
ResetEvent
VirtualAllocEx
CreateEventW
InterlockedExchange
advapi32
ClearEventLogW
IsTextUnicode
RegDeleteValueA
CreateServiceW
InitializeSid
CloseEventLog
ControlService
RegCloseKey
IsValidSecurityDescriptor
RegQueryValueW
IsValidSid
RegEnumKeyA
RegCreateKeyExW
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ