Static task
static1
Behavioral task
behavioral1
Sample
340c202d625595752e853efdffa85eba22335999530d5dd1a0236023a870fb3f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
340c202d625595752e853efdffa85eba22335999530d5dd1a0236023a870fb3f.exe
Resource
win10v2004-20221111-en
General
-
Target
340c202d625595752e853efdffa85eba22335999530d5dd1a0236023a870fb3f
-
Size
758KB
-
MD5
915850368ced8ecba7ec996124eeff14
-
SHA1
424432ce1118b8631f3134ced3b6486f83f058f9
-
SHA256
340c202d625595752e853efdffa85eba22335999530d5dd1a0236023a870fb3f
-
SHA512
ddc8715f78c28666b048e14da7abf96491340a6ac1b0d5bdf1ae6d75153de33d2d261da9427b2a626a3d33e8918e19f361359af83ba92c708bb7b4445ea5af5b
-
SSDEEP
12288:B6s5IPPC3TsJMIcl3EOWwN/NZVf3mHU/cAZGpH8nkmLM9/mpEiEQUodinDzQT:As5IwUcl3Ew/NTf20dZ8H8kb/m6iE2dZ
Malware Config
Signatures
Files
-
340c202d625595752e853efdffa85eba22335999530d5dd1a0236023a870fb3f.exe windows x86
3162c768d617475b45c7c332ad5d4b3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
CreateEventW
GetCommandLineA
CancelIo
GetFileAttributesA
GetConsoleTitleA
lstrlenA
SetLastError
HeapCreate
GetCommandLineA
GetModuleHandleA
TlsGetValue
HeapDestroy
GetVolumePathNameW
CloseHandle
CloseHandle
GetEnvironmentVariableA
VirtualQuery
GetTimeFormatW
GetDriveTypeA
advapi32
IsValidSecurityDescriptor
RegQueryValueW
CreateServiceW
RegEnumKeyA
IsValidAcl
IsValidSid
RegDeleteValueA
ControlService
InitializeSid
RegCreateKeyExW
CreateProcessAsUserA
IsTextUnicode
ClearEventLogW
tspkg
SpUserModeInitialize
SpUserModeInitialize
SpUserModeInitialize
SpUserModeInitialize
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 753KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ