Static task
static1
Behavioral task
behavioral1
Sample
75d91af3f58da54257a592e71592a4b825687b57503cc9c0aebc17afa1790b9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75d91af3f58da54257a592e71592a4b825687b57503cc9c0aebc17afa1790b9e.exe
Resource
win10v2004-20221111-en
General
-
Target
75d91af3f58da54257a592e71592a4b825687b57503cc9c0aebc17afa1790b9e
-
Size
382KB
-
MD5
740271e7b7f783bbdb268c89561c5ff6
-
SHA1
ff666ad2649f412f3ac7720507280a02c4245d6b
-
SHA256
75d91af3f58da54257a592e71592a4b825687b57503cc9c0aebc17afa1790b9e
-
SHA512
8122e5cea3c42f2add0a67feaaee248460e32c42467270253d3ebeec5f26acfc03284dcb7eb36aa6b589edd3186f9f880f7e2f845f7a19ed7063980c5794badd
-
SSDEEP
6144:1FWRMWrPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnMqOv3:10RMACRn/Tq2K7R100E++l4qh/qabGbQ
Malware Config
Signatures
Files
-
75d91af3f58da54257a592e71592a4b825687b57503cc9c0aebc17afa1790b9e.exe windows x86
c31ad173b47a320b3ce46a2032673926
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GlobalFree
VirtualAllocEx
IsBadStringPtrA
SetEvent
lstrlenA
WriteFile
ResetEvent
CloseHandle
LocalFree
GetDriveTypeA
GetEnvironmentVariableW
GlobalFlags
GetPrivateProfileIntA
GetCurrentProcessId
ReleaseMutex
GetLocalTime
GetCurrentThreadId
CreateEventW
InterlockedExchange
advapi32
RegDeleteValueA
RegCreateKeyExW
CreateServiceW
CloseEventLog
IsTextUnicode
RegCloseKey
IsValidSecurityDescriptor
InitializeSid
RegQueryValueW
ClearEventLogW
IsValidSid
RegEnumKeyA
ControlService
InitializeSid
loghours
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ