Static task
static1
Behavioral task
behavioral1
Sample
2963d9bf0dfe07a54c2c7816b5ff2c1a0385c605e36889be5651a5e983676aae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2963d9bf0dfe07a54c2c7816b5ff2c1a0385c605e36889be5651a5e983676aae.exe
Resource
win10v2004-20220812-en
General
-
Target
2963d9bf0dfe07a54c2c7816b5ff2c1a0385c605e36889be5651a5e983676aae
-
Size
381KB
-
MD5
25ce8dbbb0a8603efe2e33829f11ae80
-
SHA1
3b2231318cca6704fdc64bd0b68a7b333c62ac71
-
SHA256
2963d9bf0dfe07a54c2c7816b5ff2c1a0385c605e36889be5651a5e983676aae
-
SHA512
8885d51e8ee8590e473fe02a19409f4e3e7536252f3ae262ab3cc94bfa396dc85acb2dbb78f362f8ee42f425f3313b29f57b0b0879acad6ca820664e68b8e22b
-
SSDEEP
768:lQVn/eN5cGNYQZMn1UFGwN1qbkez9u8CTCZxl20gWWWd7:l2XGNYsMn1SZN1WXz9u8CTCZK0gWWC
Malware Config
Signatures
Files
-
2963d9bf0dfe07a54c2c7816b5ff2c1a0385c605e36889be5651a5e983676aae.exe windows x86
eba4629a64982149239cc29f32d92bab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
lstrlenA
CreateMutexA
GetExitCodeProcess
ResumeThread
GetACP
InterlockedExchange
GetModuleHandleW
CloseHandle
LocalFree
ResetEvent
CreateEventA
GetPrivateProfileIntW
GlobalFree
GetStdHandle
GetEnvironmentVariableW
GetCommandLineA
GlobalSize
VirtualAlloc
FindVolumeClose
advapi32
IsValidSid
ClearEventLogA
RegCloseKey
RegEnumKeyW
RegCreateKeyExW
RegDeleteKeyA
RegDeleteValueA
IsValidAcl
CreateServiceA
IsTextUnicode
CloseEventLog
RegQueryValueW
ControlService
admparse
AdmClose
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ