Static task
static1
Behavioral task
behavioral1
Sample
1e18ac919aeb75243a4fa4ca0004795d0d169409d3f69ad3cf5d55eb2f4e644f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e18ac919aeb75243a4fa4ca0004795d0d169409d3f69ad3cf5d55eb2f4e644f.exe
Resource
win10v2004-20220901-en
General
-
Target
1e18ac919aeb75243a4fa4ca0004795d0d169409d3f69ad3cf5d55eb2f4e644f
-
Size
714KB
-
MD5
a2838aa5597ceaa317434fa68731c614
-
SHA1
8113c1aaeabf931b3adf4371aa411f0be667e74c
-
SHA256
1e18ac919aeb75243a4fa4ca0004795d0d169409d3f69ad3cf5d55eb2f4e644f
-
SHA512
23037743645164ff924a336edae510e257a596acc20d1152e2b679982f619161295b08d264ff5d0dfa8ce622295cb5221be29ae9926c1f53c0430e69cda9afad
-
SSDEEP
12288:XrVW/9zBP3vA5LIc3yQe1f6v+FzXABF9FSebp+t:RWzJ3Y5kIyX1fc6kB3FnV+
Malware Config
Signatures
Files
-
1e18ac919aeb75243a4fa4ca0004795d0d169409d3f69ad3cf5d55eb2f4e644f.exe windows x86
a9adfbd7c313186c6fe962f8bd9f750d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
OpenSCManagerW
CryptDecrypt
RegConnectRegistryW
CryptAcquireContextW
EnumDependentServicesA
RegSetValueExW
SystemFunction036
SetTokenInformation
GetSidSubAuthority
RegisterTraceGuidsA
dnsapi
DnsReplaceRecordSetUTF8
DnsNotifyResolver
DnsStatusString
DnsQueryConfig
DnsRecordListFree
DnsDhcpSrvRegisterInit
DnsQuery_UTF8
DnsDhcpSrvRegisterTerm
DnsNameCompare_W
DnsQuery_W
DnsNameCompareEx_W
DnsModifyRecordsInSet_UTF8
DnsValidateName_UTF8
DnsValidateName_W
kernel32
GetDefaultCommConfigW
VirtualAlloc
CreateMutexA
OpenFile
GetSystemInfo
GetDevicePowerState
ClearCommBreak
FillConsoleOutputCharacterA
GetTempPathW
WriteProfileStringW
InterlockedDecrement
GlobalDeleteAtom
GetProcAddress
GetSystemDirectoryW
EnumResourceLanguagesW
SetConsoleCtrlHandler
GetSystemDefaultLangID
GetVolumePathNameA
WaitForMultipleObjects
FlushInstructionCache
FoldStringA
RemoveDirectoryA
InterlockedIncrement
netapi32
NetJoinDomain
DsGetDcNameW
NetApiBufferFree
I_NetServerSetServiceBitsEx
NetUseGetInfo
NetUserModalsGet
NetServiceEnum
comctl32
ImageList_DrawEx
ImageList_GetImageCount
ImageList_SetIconSize
PropertySheetA
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_Draw
ImageList_DrawIndirect
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 545KB - Virtual size: 874KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ