Static task
static1
Behavioral task
behavioral1
Sample
b595596eb7ac4e2faee2564f8c56dd6d4031d6b825451724b6a0a8046186420b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b595596eb7ac4e2faee2564f8c56dd6d4031d6b825451724b6a0a8046186420b.exe
Resource
win10v2004-20220812-en
General
-
Target
b595596eb7ac4e2faee2564f8c56dd6d4031d6b825451724b6a0a8046186420b
-
Size
382KB
-
MD5
71684d9c4689bf74780efe62cce3347f
-
SHA1
6c88a917ee593d7e4e7436fc74c55eb18746dfbd
-
SHA256
b595596eb7ac4e2faee2564f8c56dd6d4031d6b825451724b6a0a8046186420b
-
SHA512
c49954bb6140cec98b1ae916bbc01d5b6056b71cf8dfe7a1b01838524a4a6a8345035c60cf4a0c116f9ec2d94ff95818949a7eaade83d98421f54f087469c1a0
-
SSDEEP
6144:oF2JMeQRM5rPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnk:MiJQRMtCRn/Tq2K7R100E++l4qh/qab3
Malware Config
Signatures
Files
-
b595596eb7ac4e2faee2564f8c56dd6d4031d6b825451724b6a0a8046186420b.exe windows x86
ff944cc8a0af9d3f652b79e3268ceadb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
IsBadStringPtrA
SetEvent
GetCurrentThreadId
lstrlenA
LocalFree
LoadLibraryW
GetPrivateProfileIntA
CloseHandle
GetEnvironmentVariableW
GlobalFree
InterlockedExchange
GetDriveTypeA
ResetEvent
GetLocalTime
GetCurrentProcessId
GlobalFlags
ReleaseMutex
WriteFile
CreateEventW
advapi32
RegQueryValueW
ClearEventLogW
ControlService
IsValidSid
IsValidSecurityDescriptor
InitializeSid
IsTextUnicode
CloseEventLog
RegCreateKeyExW
RegCloseKey
CreateServiceW
RegDeleteValueA
RegEnumKeyA
InitializeSid
loghours
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ