Static task
static1
Behavioral task
behavioral1
Sample
72033b1f6e5d2de0469f1c0d414a584452e8bac007edb0a55ac3aeb7842c4cee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
72033b1f6e5d2de0469f1c0d414a584452e8bac007edb0a55ac3aeb7842c4cee.exe
Resource
win10v2004-20220901-en
General
-
Target
72033b1f6e5d2de0469f1c0d414a584452e8bac007edb0a55ac3aeb7842c4cee
-
Size
299KB
-
MD5
88c6aed071c1e1a242e680cadc72f27e
-
SHA1
cfb2dbce98d7712ce189c37dae1c9f8a4831ff9d
-
SHA256
72033b1f6e5d2de0469f1c0d414a584452e8bac007edb0a55ac3aeb7842c4cee
-
SHA512
fc9c082ef4e6f8ee5e8279aee45bf9a035bff636722c68b95eee7dd85f35eeaeea3d793a13210ef1360205131b600019fabc244b180145aba0cefa762def6c88
-
SSDEEP
6144:HDPLQTDrsOw0tvOD6jFssI/3WD59rn7wRSsiMTWfJpD:LmDrsN0ti6FssIq37kSwWfTD
Malware Config
Signatures
Files
-
72033b1f6e5d2de0469f1c0d414a584452e8bac007edb0a55ac3aeb7842c4cee.exe windows x86
7fc59d7462794156e2b64afc675fb892
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SuspendThread
LocalFree
lstrlenA
ReleaseMutex
VirtualAllocEx
LocalSize
GetSystemInfo
LoadLibraryW
GlobalFree
GetEnvironmentVariableA
CreateEventW
CreateMutexW
FreeConsole
InterlockedExchange
GetPrivateProfileIntA
CloseHandle
ResetEvent
WriteFile
GetCommandLineW
advapi32
RegDeleteValueA
IsTextUnicode
InitializeSid
ClearEventLogW
RegEnumKeyA
CloseEventLog
IsValidSid
ControlService
RegCreateKeyExW
CreateServiceW
RegCloseKey
IsValidSecurityDescriptor
RegQueryValueW
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ