Static task
static1
Behavioral task
behavioral1
Sample
95bef37951fa87b60dfdcc502dfb6c7d5a245e35f7118df82de56ba818968cca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95bef37951fa87b60dfdcc502dfb6c7d5a245e35f7118df82de56ba818968cca.exe
Resource
win10v2004-20220812-en
General
-
Target
95bef37951fa87b60dfdcc502dfb6c7d5a245e35f7118df82de56ba818968cca
-
Size
742KB
-
MD5
f957185ea8eaa5c235e26672457e8546
-
SHA1
6d6c35ed60895522fe9a70e90f68cf14bbe26294
-
SHA256
95bef37951fa87b60dfdcc502dfb6c7d5a245e35f7118df82de56ba818968cca
-
SHA512
e106e7821e65156e9f8dd8e2c8ac583dac0782582850b42902a451c810c822a375adfbd51003b893af1c2186094e19ac57ad4352a6f9de3128063c15058912cf
-
SSDEEP
12288:Y3y9dQO14E6xX3XXtA3dS7bkk2iC/qQFQh0DSZijCVDjM2d8JXcZJRAl8c4JHX6g:Y3y9dQjRRHtALkZ852IjKjMi8SLjRJHT
Malware Config
Signatures
Files
-
95bef37951fa87b60dfdcc502dfb6c7d5a245e35f7118df82de56ba818968cca.exe windows x86
878ed43258d8cb4849cc32545e6dd813
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
SetLastError
CloseHandle
HeapDestroy
CreateEventW
GetEnvironmentVariableA
GetStartupInfoA
GetFileAttributesW
GetCommandLineA
GetTimeFormatW
GlobalFlags
GetConsoleTitleA
DeleteFileA
EnumResourceTypesA
HeapCreate
CloseHandle
GetModuleHandleA
GetCommandLineA
GetDriveTypeW
WriteConsoleA
advapi32
IsValidSid
RegDeleteValueA
RegQueryValueW
InitializeSid
RegEnumKeyA
IsValidSid
CreateProcessAsUserW
IsValidSecurityDescriptor
IsValidSid
RegCreateKeyExW
IsValidSid
IsValidAcl
IsValidSid
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 735KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ