Static task
static1
Behavioral task
behavioral1
Sample
fdf11700312ead8268c938ec6a1140d6bbc5b6c6304c25f82976a7af8a9a90a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fdf11700312ead8268c938ec6a1140d6bbc5b6c6304c25f82976a7af8a9a90a1.exe
Resource
win10v2004-20220812-en
General
-
Target
fdf11700312ead8268c938ec6a1140d6bbc5b6c6304c25f82976a7af8a9a90a1
-
Size
162KB
-
MD5
e158022f756213ec022d31273384374f
-
SHA1
c2f708db281b521abcbcca00d9d105ec33e58530
-
SHA256
fdf11700312ead8268c938ec6a1140d6bbc5b6c6304c25f82976a7af8a9a90a1
-
SHA512
e5ffc11bcbb2c732510fbe0214ae4be9dd97223947f445387fd228387469f175d1d46eab92d4d2da89ab35db056788884caa5b08be4812c4c609876b0c397a2d
-
SSDEEP
3072:WMsjxoRMqC6OTIMP8mJ+eF6HYSemW+1hp67SZSzDy71gr/Mlzd2:WfoRMcOkI8mJ+ehSemWfSZSzuhgrE9d2
Malware Config
Signatures
Files
-
fdf11700312ead8268c938ec6a1140d6bbc5b6c6304c25f82976a7af8a9a90a1.exe windows x86
5e22a11bac3190e8bf47cf9d09f85247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetACP
GetEnvironmentVariableW
CloseHandle
GlobalSize
WriteFile
GetCommandLineA
GetStdHandle
ResumeThread
LocalFree
FindVolumeClose
lstrlenA
GetModuleHandleW
VirtualAlloc
CreateMutexA
GetPrivateProfileIntW
ResetEvent
GlobalFree
GetExitCodeProcess
InterlockedExchange
advapi32
CreateServiceA
RegCreateKeyExW
IsValidSecurityDescriptor
IsValidSid
RegEnumKeyW
RegDeleteKeyA
RegDeleteValueA
RegQueryValueW
CloseEventLog
ClearEventLogW
IsTextUnicode
RegCloseKey
ControlService
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ