Static task
static1
Behavioral task
behavioral1
Sample
8107606d90ad88077fc560e410bdd689636aac585bcb9bd690b39bd2fdd72af8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8107606d90ad88077fc560e410bdd689636aac585bcb9bd690b39bd2fdd72af8.exe
Resource
win10v2004-20220812-en
General
-
Target
8107606d90ad88077fc560e410bdd689636aac585bcb9bd690b39bd2fdd72af8
-
Size
303KB
-
MD5
816bde928f8d91efce29569cca94a4b5
-
SHA1
97006a70f635b1d5beac105f3068f9a9b5950299
-
SHA256
8107606d90ad88077fc560e410bdd689636aac585bcb9bd690b39bd2fdd72af8
-
SHA512
e863ad15f72585c9af7098e39d1be408c6a74749179e3ec7ffd5fb8954fa9c776e28c0f3663051970f9a85ef5db94a661a0d57d2243a74de77fb01a21f8c82c3
-
SSDEEP
6144:xnct8nU//uf1/HSzEoFGL+XESRNU61DtFj0m/3sVei+QV7mw88hllUV:xqt//gFHSg+jfc61DtFj0K6VRllC
Malware Config
Signatures
Files
-
8107606d90ad88077fc560e410bdd689636aac585bcb9bd690b39bd2fdd72af8.exe windows x86
213413f4ea3788112c2b2f400a4ff548
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetExitCodeProcess
GlobalFree
GetEnvironmentVariableW
FindVolumeClose
GlobalSize
lstrlenA
ResumeThread
CreateMutexA
CloseHandle
VirtualAlloc
ResetEvent
LocalFree
GetACP
GetStdHandle
GetCommandLineA
GetPrivateProfileIntW
GetModuleHandleW
CreateEventA
InterlockedExchange
advapi32
IsTextUnicode
RegDeleteKeyA
IsValidSecurityDescriptor
RegEnumKeyW
RegCloseKey
CreateServiceA
IsValidSid
ClearEventLogW
RegCreateKeyExW
CloseEventLog
ControlService
RegDeleteValueA
RegQueryValueW
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ