Static task
static1
Behavioral task
behavioral1
Sample
a0c6592253dca3fb91336d51c7abc4ee81a6161bcb7e7a11ef2060a7c382b560.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0c6592253dca3fb91336d51c7abc4ee81a6161bcb7e7a11ef2060a7c382b560.exe
Resource
win10v2004-20221111-en
General
-
Target
a0c6592253dca3fb91336d51c7abc4ee81a6161bcb7e7a11ef2060a7c382b560
-
Size
818KB
-
MD5
ae31ac3baafa926245caeb30b5743ad5
-
SHA1
cd546721602dea6f179d376420061e6b600933ea
-
SHA256
a0c6592253dca3fb91336d51c7abc4ee81a6161bcb7e7a11ef2060a7c382b560
-
SHA512
c5cfe23af03eb14687fd72aba5020f4c729ebdeafcb7263a0bb5315f5a2a701b62ca2eb8575add95c617d7bb9dad92cd2a8b7c0f776111989a5c6f3ce06a80ff
-
SSDEEP
24576:XRMNjbiJIecoAKaPbQf+kmHHqdrKxoBhsTk:XRM4JIeAPc3mnq9K6BhsT
Malware Config
Signatures
Files
-
a0c6592253dca3fb91336d51c7abc4ee81a6161bcb7e7a11ef2060a7c382b560.exe windows x86
62bc881c41d09ada68e060cb72b48a0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GlobalSize
GetStdHandle
GlobalFree
CreateEventA
FindVolumeClose
VirtualAlloc
GetExitCodeProcess
LocalFree
CreateMutexA
GetPrivateProfileIntW
GetCommandLineA
GetModuleHandleW
GetEnvironmentVariableW
GetACP
ResumeThread
ResetEvent
InterlockedExchange
CloseHandle
lstrlenA
advapi32
RegCreateKeyExW
CloseEventLog
IsValidAcl
RegDeleteKeyA
IsValidSid
RegCloseKey
ClearEventLogA
CreateServiceA
IsTextUnicode
ControlService
RegEnumKeyW
RegQueryValueW
RegDeleteValueA
amstream
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ