Static task
static1
Behavioral task
behavioral1
Sample
a0cb264a1d3d2cdefdfca60be57386d4bf26c9fed2d5cdd6a191ae50fead6601.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0cb264a1d3d2cdefdfca60be57386d4bf26c9fed2d5cdd6a191ae50fead6601.exe
Resource
win10v2004-20221111-en
General
-
Target
a0cb264a1d3d2cdefdfca60be57386d4bf26c9fed2d5cdd6a191ae50fead6601
-
Size
900KB
-
MD5
38a28efe73b4282ee3f9f74090a05d25
-
SHA1
9c769800c8b5d6af0516c9b8cd460d41bf787a5b
-
SHA256
a0cb264a1d3d2cdefdfca60be57386d4bf26c9fed2d5cdd6a191ae50fead6601
-
SHA512
9e36c5913291a990ea933a79294fa3fe53c6ddf8a368d3be5f43c1971baab55f2a7c0548be7554d38110e0dcd3406d0dd0b7a09b8007ca24a33f8a9a2ef02e0b
-
SSDEEP
12288:HXeFuzfBjGeaujH66KIzY2QSyLCv+py7cEKym1H27+1wzNjW:HXecz5jGeoJ2OLCv+MUymZ2BzU
Malware Config
Signatures
Files
-
a0cb264a1d3d2cdefdfca60be57386d4bf26c9fed2d5cdd6a191ae50fead6601.exe windows x86
7ad9a42d69f404526cd1480694d05665
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GlobalFree
CreateFileA
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
CloseHandle
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetSystemDirectoryA
CreateThread
Sleep
LoadLibraryA
GetProcAddress
CreateDirectoryA
GetLastError
SetLastError
lstrlenA
GetACP
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LCMapStringW
user32
MessageBoxA
EndDialog
SetClassLongA
IsDlgButtonChecked
PostQuitMessage
LoadIconA
DialogBoxParamA
CheckDlgButton
advapi32
RegCreateKeyExA
RegSetValueExA
OpenSCManagerA
CreateServiceA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
StartServiceA
shell32
ShellExecuteA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ