Static task
static1
Behavioral task
behavioral1
Sample
b159f95dfcf7fa6c330052ab95a3579402e63059acc589fcdc693a7287b82dc6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b159f95dfcf7fa6c330052ab95a3579402e63059acc589fcdc693a7287b82dc6.exe
Resource
win10v2004-20220901-en
General
-
Target
b159f95dfcf7fa6c330052ab95a3579402e63059acc589fcdc693a7287b82dc6
-
Size
297KB
-
MD5
e0a341e3f74779fae049df46c8d5b031
-
SHA1
1307010e321addbaad1f212384c36ebbc0d9d0ac
-
SHA256
b159f95dfcf7fa6c330052ab95a3579402e63059acc589fcdc693a7287b82dc6
-
SHA512
fefa59e0f8ec08a3636a5687335de99c26796cab3d6baf0bf3f014736dd9debe10b35b6a17987cd4d037cff286a3e64fbe8b280d43cb5358f95078158eefbfe3
-
SSDEEP
6144:6u0NvnWfEEf+VaEf9sCt6AOcNmZNC/WP5l3h:6uw/Wf7mL9hOc02/WP5Nh
Malware Config
Signatures
Files
-
b159f95dfcf7fa6c330052ab95a3579402e63059acc589fcdc693a7287b82dc6.exe windows x86
bef7061747a857cd2381e92f7de50583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
CreateFileA
LocalFree
GetExitCodeProcess
SetEvent
GetTickCount
SuspendThread
GetFileAttributesA
GetComputerNameA
CloseHandle
HeapCreate
FindAtomA
TlsGetValue
GetCommandLineW
ResetEvent
SetLastError
CreateThread
GetModuleHandleA
GetDiskFreeSpaceW
GetSystemTime
advapi32
RegEnumKeyExA
CreateServiceW
IsTokenRestricted
GetFileSecurityA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
GetLengthSid
RegEnumValueA
CredFree
CloseEventLog
GetUserNameW
RegQueryValueA
cryptui
LocalEnroll
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ