Static task
static1
Behavioral task
behavioral1
Sample
a742d0ea09653865e94b1217bdb5d570f1efeecbaf975c27fbcba263a9944b4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a742d0ea09653865e94b1217bdb5d570f1efeecbaf975c27fbcba263a9944b4b.exe
Resource
win10v2004-20220812-en
General
-
Target
a742d0ea09653865e94b1217bdb5d570f1efeecbaf975c27fbcba263a9944b4b
-
Size
136KB
-
MD5
57d519bba0f47aee62381224dc36230d
-
SHA1
c89ea46172f01397881df66d0db9e4964b1e9902
-
SHA256
a742d0ea09653865e94b1217bdb5d570f1efeecbaf975c27fbcba263a9944b4b
-
SHA512
927d8c6b8797afaa8294bb7997f6a46a3321cc5b60c3e2e094a9965909a7383f3856a17b65eb1c14bffac3496923301914f74cf887b02f0891b1db97ec338930
-
SSDEEP
3072:Lwds0xRMRMufnFXCoNggcx19GlxzHnx5wvQNSa4owMOXu:EIRMepCQ0TexdCoNSQwMOe
Malware Config
Signatures
Files
-
a742d0ea09653865e94b1217bdb5d570f1efeecbaf975c27fbcba263a9944b4b.exe windows x86
7ee94f20dda8cb3e9fb786db27f4a6ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
CloseHandle
ReleaseMutex
InterlockedExchange
WriteFile
HeapCreate
LocalFree
ResumeThread
GetPrivateProfileIntW
GlobalSize
GetEnvironmentVariableW
CreateMutexA
GetExitCodeProcess
ResetEvent
GetCommandLineA
GlobalFree
GetACP
lstrlenA
CreateEventA
GetStdHandle
advapi32
RegQueryValueW
IsTextUnicode
CloseEventLog
RegDeleteKeyA
RegEnumKeyW
ClearEventLogW
RegDeleteValueA
CreateServiceA
IsValidSecurityDescriptor
RegCreateKeyExW
RegCloseKey
IsValidSid
ControlService
btpanui
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ