Static task
static1
Behavioral task
behavioral1
Sample
8672f4d9fb14a13024405dcee0774a30f8626fd9e2ec3b2a6b7099d546043dae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8672f4d9fb14a13024405dcee0774a30f8626fd9e2ec3b2a6b7099d546043dae.exe
Resource
win10v2004-20221111-en
General
-
Target
8672f4d9fb14a13024405dcee0774a30f8626fd9e2ec3b2a6b7099d546043dae
-
Size
299KB
-
MD5
bdce82a27e3a66a50d73e315646cb520
-
SHA1
b0f04daa66b11c7fa3947dd563274cb7040dbd6c
-
SHA256
8672f4d9fb14a13024405dcee0774a30f8626fd9e2ec3b2a6b7099d546043dae
-
SHA512
05c02d55b0579c56e7bd7135ac971ed36b4bfe6942741a88425bdbf54da26c152816a899867a3cb081c14cbd702d7ab4093aef3cb194b32a798c511a3650a915
-
SSDEEP
6144:yNHiMG3VvzOcjxNnCsQdLXFlQZ89JHvffIT3el6wqqd2d:MiFv3jfnOXF7THvff16wqqd2
Malware Config
Signatures
Files
-
8672f4d9fb14a13024405dcee0774a30f8626fd9e2ec3b2a6b7099d546043dae.exe windows x86
473a31c86ba48b31024ebaacc0e02dba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetPrivateProfileStructW
GetTickCount
SetLastError
CreateThread
GetDiskFreeSpaceA
CreateFileA
GetModuleHandleA
GetFileAttributesA
LoadLibraryA
FindAtomA
GetDriveTypeA
HeapCreate
GetComputerNameA
lstrlenA
GetSystemTime
ResetEvent
ResumeThread
GetCommandLineW
CloseHandle
advapi32
RegDeleteKeyA
RegCloseKey
IsTokenUntrusted
RegEnumKeyExA
FreeSid
CloseEventLog
RegQueryValueA
GetFileSecurityA
GetUserNameA
RegCreateKeyExA
CreateServiceA
RegEnumValueA
GetLengthSid
ntshrui
GetLocalPathFromNetResourceA
IsPathSharedA
GetNetResourceFromLocalPathA
IsPathSharedW
IsFolderPrivateForUser
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ