Static task
static1
Behavioral task
behavioral1
Sample
c59dcee003eb016521772b507ce10c7e3890ca7b93a8805e7a8889d75e9facc6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c59dcee003eb016521772b507ce10c7e3890ca7b93a8805e7a8889d75e9facc6.exe
Resource
win10v2004-20221111-en
General
-
Target
c59dcee003eb016521772b507ce10c7e3890ca7b93a8805e7a8889d75e9facc6
-
Size
8KB
-
MD5
672f640139b98f2472ce4e56c1b6a762
-
SHA1
14fb54f15c22a17547a295b1b0c7f7ba0b320596
-
SHA256
c59dcee003eb016521772b507ce10c7e3890ca7b93a8805e7a8889d75e9facc6
-
SHA512
e1348a886831ba61c542e219be8dffa91d23c48e0a10b388f0b138ff6f2532e55c5463e706c922234960fcd4fd8b0ed820cd9193b2290c452f489ce41c1cc837
-
SSDEEP
96:hPke4Ydzomt8B6ZWoZZD1KP5WgLOIJpJ5cdW9VqZLXkMtrMtN+nakM8:hyYdZt80bZZK5XLBJpYdW9w9in+H
Malware Config
Signatures
Files
-
c59dcee003eb016521772b507ce10c7e3890ca7b93a8805e7a8889d75e9facc6.exe windows x86
2cbfd5e7c518a950d8b31fce16cc9c37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateEventA
CreateMutexA
ResumeThread
GetStdHandle
GlobalSize
lstrlenA
GetPrivateProfileIntW
GetModuleHandleW
GlobalFree
LocalFree
GetEnvironmentVariableW
GetExitCodeProcess
ResetEvent
HeapCreate
GetACP
CloseHandle
InterlockedExchange
WriteFile
ReleaseMutex
advapi32
RegQueryValueW
CloseEventLog
ClearEventLogW
RegDeleteValueA
RegCloseKey
RegEnumKeyW
IsTextUnicode
ControlService
RegCreateKeyExW
RegDeleteKeyA
IsValidSecurityDescriptor
IsValidSid
CreateServiceA
btpanui
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ