Static task
static1
Behavioral task
behavioral1
Sample
99301ca02950956ad39c2a55bd1ec20fe3ae5b55f219b1c8e6e40e0dac8d6c94.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99301ca02950956ad39c2a55bd1ec20fe3ae5b55f219b1c8e6e40e0dac8d6c94.exe
Resource
win10v2004-20220901-en
General
-
Target
99301ca02950956ad39c2a55bd1ec20fe3ae5b55f219b1c8e6e40e0dac8d6c94
-
Size
130KB
-
MD5
3d4c96d6166328768cb8d604ca756c79
-
SHA1
50312e6f9e71533b0e0e295ec8ee86b11fded695
-
SHA256
99301ca02950956ad39c2a55bd1ec20fe3ae5b55f219b1c8e6e40e0dac8d6c94
-
SHA512
cff8bddd7edac610b23a900369256a061b3bc17d163634af376503f05a0ebbd95f1453aa760b8e0dd4a639a158cb57ba09b63d6f8ef27f6abc8b498fd2ce81f4
-
SSDEEP
1536:sd8RBcvroUpH0dACZ+gqcIpYrVnd2Se86h68SOsDu5iwJ6oBsj63X3J:m8R+rhpqEdsVnd2SVxOKuEwEBw
Malware Config
Signatures
Files
-
99301ca02950956ad39c2a55bd1ec20fe3ae5b55f219b1c8e6e40e0dac8d6c94.exe windows x86
eb2031058a9dfe669e7ecd2ca541df47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetStartupInfoA
GetACP
TlsGetValue
IsBadCodePtr
GetModuleFileNameA
GetStdHandle
CancelIo
ReleaseMutex
CreateFileMappingA
TlsAlloc
CreateFileA
HeapCreate
GetModuleHandleA
SetLastError
SetEvent
GetCommandLineW
ResetEvent
GetEnvironmentVariableA
lstrlenA
advapi32
ControlService
RegCreateKeyExW
RegQueryValueW
InitializeSid
IsValidSid
RegEnumKeyA
RegDeleteValueA
CreateProcessAsUserA
ClearEventLogW
IsValidAcl
IsTextUnicode
IsValidSecurityDescriptor
CreateServiceW
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE