Static task
static1
Behavioral task
behavioral1
Sample
e7c9c4948e81f1f91e56c9378185ec248e1ba22d3390912dbb6e4fbaf264d578.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7c9c4948e81f1f91e56c9378185ec248e1ba22d3390912dbb6e4fbaf264d578.exe
Resource
win10v2004-20221111-en
General
-
Target
e7c9c4948e81f1f91e56c9378185ec248e1ba22d3390912dbb6e4fbaf264d578
-
Size
304KB
-
MD5
cbdd94b77f9f4c61d51ef44aed231504
-
SHA1
054eee2205e9bdd8a31f17fe2501302de3e2ba41
-
SHA256
e7c9c4948e81f1f91e56c9378185ec248e1ba22d3390912dbb6e4fbaf264d578
-
SHA512
5d176ff66768703c23402ccff68f2a99e2d34b7a50773b12124bbe1621bd86d2d41a611067a4ee037598922e4a8ca28432d1283c30b6264ee87124bff69fd76a
-
SSDEEP
6144:PB+6eXAgGl0s01+EMYWTf+zgAIBdUEMs+gZukW2mAIVw0t1AZ2LQZZ8:prgGl0t+QWTf+lIBSEMs+OVW2wLjAELT
Malware Config
Signatures
Files
-
e7c9c4948e81f1f91e56c9378185ec248e1ba22d3390912dbb6e4fbaf264d578.exe windows x86
e334d0848fe5f862857657a638512f44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FindVolumeClose
GetPrivateProfileIntW
GetCommandLineA
GetExitCodeProcess
lstrlenA
GetACP
CloseHandle
GetEnvironmentVariableW
GetModuleHandleW
ResumeThread
GlobalFree
ResetEvent
GetStdHandle
CreateMutexA
InterlockedExchange
GlobalSize
WriteFile
CreateEventA
VirtualAlloc
advapi32
CloseEventLog
RegDeleteKeyA
IsValidAcl
RegCreateKeyExW
IsTextUnicode
IsValidSid
ControlService
RegQueryValueW
CreateServiceA
RegCloseKey
RegDeleteValueA
RegEnumKeyW
ClearEventLogA
amstream
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ