Static task
static1
Behavioral task
behavioral1
Sample
b647622030b4c00121949ab55f17c1188b1c2e9523b8f5e43a6db1b4eed73b3c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b647622030b4c00121949ab55f17c1188b1c2e9523b8f5e43a6db1b4eed73b3c.exe
Resource
win10v2004-20221111-en
General
-
Target
b647622030b4c00121949ab55f17c1188b1c2e9523b8f5e43a6db1b4eed73b3c
-
Size
770KB
-
MD5
38ec804885a26cafd1eb5468affe3659
-
SHA1
aaa9b3a502cc8a656f2d04ddfe97ff72ec018286
-
SHA256
b647622030b4c00121949ab55f17c1188b1c2e9523b8f5e43a6db1b4eed73b3c
-
SHA512
afead21a0fb921d3f004b8205d1440b6e2190e9cc2c51f822d60625d1d83fc43da908e4670672cb7c9fa66858406760a7df505f9088e06648d5cb66fb5107e0a
-
SSDEEP
12288:Yvq5DDb3BH4eR8Xi+t/UGapvaZ2l/O6VqqfRYEMPigwaRqxLeu+r:DRYeOXi+/apyEtVqqfOv+sco
Malware Config
Signatures
Files
-
b647622030b4c00121949ab55f17c1188b1c2e9523b8f5e43a6db1b4eed73b3c.exe windows x86
fb373f1df38da52975f827d2018e876b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ReleaseMutex
CloseHandle
CloseHandle
GetCommandLineA
SuspendThread
lstrlenW
GetModuleFileNameW
GetStartupInfoA
GetTickCount
VirtualQuery
GetTimeFormatA
OpenMutexA
SetConsoleCP
Sleep
CreateEventA
SetEvent
HeapCreate
LocalFlags
DeleteFileA
advapi32
IsValidSid
RegEnumKeyA
ControlService
CreateProcessAsUserA
IsTextUnicode
InitializeSid
CreateServiceW
IsValidSecurityDescriptor
RegQueryValueW
ClearEventLogW
RegCreateKeyExW
RegDeleteValueA
IsValidAcl
msvcirt
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ