Static task
static1
Behavioral task
behavioral1
Sample
232c0e1eb10a1576f5461218d7de00edca384190bc19f3923c9781fc793799bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
232c0e1eb10a1576f5461218d7de00edca384190bc19f3923c9781fc793799bc.exe
Resource
win10v2004-20220812-en
General
-
Target
232c0e1eb10a1576f5461218d7de00edca384190bc19f3923c9781fc793799bc
-
Size
299KB
-
MD5
047777ffc24a86034f3e2c4ba85f7790
-
SHA1
cb2d26f2ae20ccc1d8d7d8d24c7a200fbd612cf0
-
SHA256
232c0e1eb10a1576f5461218d7de00edca384190bc19f3923c9781fc793799bc
-
SHA512
7179a19525e721f11f8a5e23359e0c88e603434227a63d5c297c2b6eba0247edbb10e9a6944c08b6798de598424afda7f830441c3c5846e178e3f04bb9f1f949
-
SSDEEP
6144:aVVVVVVVVVVVVs2oDgYkRRx+eHMaQWAs+TjkDdtbv5Avw+KOmHJUkHoBR0dN3F:aVVVVVVVVVVVVs2oDgYkRiQGWAhTjedR
Malware Config
Signatures
Files
-
232c0e1eb10a1576f5461218d7de00edca384190bc19f3923c9781fc793799bc.exe windows x86
1cfa918c15e48f9f5b54c3037507a21a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
SetEvent
WriteFile
GetDriveTypeA
ResetEvent
GetPrivateProfileIntA
GlobalFlags
GetCurrentProcessId
CloseHandle
lstrlenA
GetCurrentThreadId
InterlockedExchange
ReleaseMutex
GetEnvironmentVariableW
GlobalFree
CreateEventW
VirtualAllocEx
LoadLibraryW
IsBadStringPtrA
GetLocalTime
advapi32
IsValidSecurityDescriptor
RegEnumKeyA
CreateServiceW
RegCreateKeyExW
IsTextUnicode
InitializeSid
ControlService
RegDeleteValueA
CloseEventLog
RegCloseKey
RegQueryValueW
ClearEventLogW
IsValidSid
InitializeSid
loghours
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ