Static task
static1
Behavioral task
behavioral1
Sample
995d81e0824fe356248b2598500d968e9302eb0adc746b5149e617e034d461ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
995d81e0824fe356248b2598500d968e9302eb0adc746b5149e617e034d461ab.exe
Resource
win10v2004-20220812-en
General
-
Target
995d81e0824fe356248b2598500d968e9302eb0adc746b5149e617e034d461ab
-
Size
184KB
-
MD5
e27cacb5b14f04242064ffc11735c8f0
-
SHA1
2866149bf8c43e4dc7b152f85162f84ee80ce7ac
-
SHA256
995d81e0824fe356248b2598500d968e9302eb0adc746b5149e617e034d461ab
-
SHA512
5ebddb53e3e85cc2f2d5f64777c0122ed5097ce4bc9eb757161613f81f4cbab9ccc3b3abce46bf4a625998de6d80b265df7e365cfc32d9e4226a33f62a6ec9d2
-
SSDEEP
3072:9BPQBL8OiV8QmQ4dbaxm13RbiS9i41kCB+:9BQuV/L6+8NpigkCM
Malware Config
Signatures
Files
-
995d81e0824fe356248b2598500d968e9302eb0adc746b5149e617e034d461ab.exe windows x86
60853925fff8ef1358c6c8e97065ce01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
GetCurrentProcess
OpenProcess
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
FreeLibrary
WaitForSingleObject
CreateProcessA
GetVersionExA
GetModuleFileNameA
SetFileTime
GetFileAttributesExA
GetStartupInfoA
GetModuleHandleA
GetLastError
CloseHandle
GetSystemDirectoryA
Sleep
WinExec
TerminateProcess
user32
GetDesktopWindow
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
SendMessageTimeoutA
RegisterWindowMessageA
GetClassNameA
PostMessageA
EnumChildWindows
GetWindowThreadProcessId
EnumWindows
RegisterClassExA
DefWindowProcA
PostQuitMessage
advapi32
DeleteService
LookupAccountNameA
GetUserNameA
CloseServiceHandle
StartServiceA
OpenServiceA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CreateServiceA
ConvertSidToStringSidA
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantClear
shlwapi
SHGetValueA
SHSetValueA
msvcrt
strchr
_stricmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
fopen
fwrite
fflush
fclose
__CxxFrameHandler
strstr
_strlwr
rand
sprintf
_access
srand
time
wcslen
atoi
dbghelp
ImageNtHeader
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ydata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
odata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ndata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ