Static task
static1
Behavioral task
behavioral1
Sample
ead5837c527a632126248e0d50ee631f8dcdd8681ddfedf8309c6209a7bbf97d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ead5837c527a632126248e0d50ee631f8dcdd8681ddfedf8309c6209a7bbf97d.exe
Resource
win10v2004-20220812-en
General
-
Target
ead5837c527a632126248e0d50ee631f8dcdd8681ddfedf8309c6209a7bbf97d
-
Size
361KB
-
MD5
ca24bee9881f52596e407f84c8c46b82
-
SHA1
f7cdd9c3e1023368245ea52f2584cb41eec8487b
-
SHA256
ead5837c527a632126248e0d50ee631f8dcdd8681ddfedf8309c6209a7bbf97d
-
SHA512
c91933eea21d591c2a0fb66d2c9bd832a2296b87edc512730dea4288e7a17cb6149f88a90aa1eea5043bc3851e17c7ec7514577c61088ab4c7e944e8f2971f51
-
SSDEEP
6144:AL6YgKKnuuBliQ7i1NodWRDOLclyjdCxvcE+yPWRptI4ychhUCuwc+v9xHD+GcRd:AeYgdBZi1NodWRQkjWRptI4ychD2+v9
Malware Config
Signatures
Files
-
ead5837c527a632126248e0d50ee631f8dcdd8681ddfedf8309c6209a7bbf97d.exe windows x86
585b006a65797c1c41c46902926a9a3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetTickCount
CreateMutexA
GetLastError
GetVersionExW
SetEvent
TlsGetValue
GetModuleHandleA
FreeConsole
GetCommandLineA
OpenMutexA
SearchPathA
CloseHandle
CreateThread
ReleaseMutex
DeleteCriticalSection
FindResourceExA
Sleep
FindClose
VirtualProtect
advapi32
RegEnumKeyExA
GetFileSecurityA
RegCloseKey
OpenEventLogA
EqualSid
IsValidSid
RegLoadKeyA
LsaClose
FreeSid
RegCreateKeyExA
CloseTrace
CloseEventLog
LsaFreeMemory
LsaSetSecret
RegCloseKey
loghours
DialinHoursDialogEx
DirSyncScheduleDialog
DirSyncScheduleDialogEx
DialinHoursDialog
LogonScheduleDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ