Static task
static1
Behavioral task
behavioral1
Sample
9b107c9ec6905b38d240248b44a4550790724be169cb6c3e0d2961e0a50ae777.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b107c9ec6905b38d240248b44a4550790724be169cb6c3e0d2961e0a50ae777.exe
Resource
win10v2004-20220812-en
General
-
Target
9b107c9ec6905b38d240248b44a4550790724be169cb6c3e0d2961e0a50ae777
-
Size
383KB
-
MD5
17e467d05ba732f997441c22923c4c30
-
SHA1
664b702e830f235568264191aa482eda8eeae33f
-
SHA256
9b107c9ec6905b38d240248b44a4550790724be169cb6c3e0d2961e0a50ae777
-
SHA512
80ca2553d5de57618834b07b0d785351d5844cf078fc0b9cadd3893e93f4427620530048f05b2b9b8d200b0296995ae0f31bb2419cb293789cba100b040e4f5a
-
SSDEEP
6144:YGvX2YcY1t3Vkd/lPhO/EEJUrVBs8rloiO8x2zkANscWoqxWZ3jc4OMRDgdjln4W:XeYcat3Od95O/E1rVXlhhzANscWoqx6w
Malware Config
Signatures
Files
-
9b107c9ec6905b38d240248b44a4550790724be169cb6c3e0d2961e0a50ae777.exe windows x86
0280519d8b8ed65e89677403e0826b6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sleep
CreateEventA
CloseHandle
SetEvent
GetCommandLineA
GetTickCount
GetModuleFileNameW
GetModuleHandleA
SetFilePointer
ReleaseMutex
HeapCreate
OpenMutexA
SuspendThread
lstrlenW
GetStartupInfoA
DeleteFileA
SetConsoleCP
GlobalFlags
GetTimeFormatA
advapi32
IsValidSid
RegQueryValueW
RegEnumKeyA
InitializeSid
RegCreateKeyExW
IsTextUnicode
ControlService
IsValidSecurityDescriptor
ClearEventLogW
IsValidAcl
CreateProcessAsUserA
RegDeleteValueA
CreateServiceW
msvcirt
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ