Static task
static1
Behavioral task
behavioral1
Sample
09cfcb09fe2330a1867479e71ffd6303341e1d942a24977d69b2177ea019f676.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
09cfcb09fe2330a1867479e71ffd6303341e1d942a24977d69b2177ea019f676.exe
Resource
win10v2004-20221111-en
General
-
Target
09cfcb09fe2330a1867479e71ffd6303341e1d942a24977d69b2177ea019f676
-
Size
304KB
-
MD5
04bf39cbf5812a56af1b9325eb43d400
-
SHA1
150f50fe34baf2ec1fdaf1d8bb4d70a2add1dc2c
-
SHA256
09cfcb09fe2330a1867479e71ffd6303341e1d942a24977d69b2177ea019f676
-
SHA512
90fde044ff4e4868f1c4052c3f951988e269e54ff4a231487542a6186c4b5305b6aa10ee2ce1ffd03935e27ece7d21837f5304bbb67edab53be498cc9acaf1b6
-
SSDEEP
6144:XKNQ1hDwDd+CQ7s2XOioepjwlIF3WEfTOblELp:XjwDcCHca2F3WEqbK
Malware Config
Signatures
Files
-
09cfcb09fe2330a1867479e71ffd6303341e1d942a24977d69b2177ea019f676.exe windows x86
a0e381b8d671e50e0eba696a51ed718d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
FindVolumeClose
GetModuleHandleW
lstrlenA
GetEnvironmentVariableW
GetCommandLineA
GetPrivateProfileIntW
CloseHandle
GlobalSize
GetStdHandle
LocalFree
GetACP
ResetEvent
GlobalFree
VirtualAlloc
CreateEventA
WriteFile
InterlockedExchange
GetExitCodeProcess
CreateMutexA
advapi32
CloseEventLog
CreateServiceA
IsValidSid
RegCreateKeyExW
RegDeleteValueA
RegDeleteKeyA
IsValidAcl
ControlService
RegEnumKeyW
ClearEventLogA
IsTextUnicode
RegCloseKey
RegQueryValueW
amstream
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ