Static task
static1
Behavioral task
behavioral1
Sample
cce471fb71bd18f854208df013eccfbfc978293c767eab087b4b3e820795929d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cce471fb71bd18f854208df013eccfbfc978293c767eab087b4b3e820795929d.exe
Resource
win10v2004-20221111-en
General
-
Target
cce471fb71bd18f854208df013eccfbfc978293c767eab087b4b3e820795929d
-
Size
303KB
-
MD5
97135ed5376e91db0a6ad4d30fe09021
-
SHA1
0e10883132e16f3623e0b0d632e1e450e9e813c4
-
SHA256
cce471fb71bd18f854208df013eccfbfc978293c767eab087b4b3e820795929d
-
SHA512
4c087be3e77a1e211c4fa1401efa14e2bbef4c49eaf1b2e304073b5c5a6867132c96ec8868ee2c254787ca29d3213a05811ba8c6a5565a30248af0b50ddf06d8
-
SSDEEP
6144:YyXmG0p50v02hKeLGpcBrBcobqe1dcapIRfa4+lvSM:1B0Ev028eccB9cXe/p48R
Malware Config
Signatures
Files
-
cce471fb71bd18f854208df013eccfbfc978293c767eab087b4b3e820795929d.exe windows x86
ae4b8743d9a6e40d9e8618427b25af95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
ResumeThread
GetExitCodeProcess
ResetEvent
GetEnvironmentVariableW
GetPrivateProfileIntW
lstrlenA
GetACP
LocalFree
InterlockedExchange
CloseHandle
GlobalSize
CreateEventA
FindVolumeClose
GetCommandLineA
GetModuleHandleW
VirtualAlloc
GlobalFree
CreateMutexA
GetStdHandle
advapi32
IsValidSid
CreateServiceA
CloseEventLog
IsTextUnicode
RegEnumKeyW
ControlService
ClearEventLogW
RegCreateKeyExW
RegCloseKey
RegDeleteValueA
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteKeyA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ