Static task
static1
Behavioral task
behavioral1
Sample
c83265957ec46804b42da5e8105fe6b60dd226e21fdc340c3f3b41fd4e3b6968.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c83265957ec46804b42da5e8105fe6b60dd226e21fdc340c3f3b41fd4e3b6968.exe
Resource
win10v2004-20220812-en
General
-
Target
c83265957ec46804b42da5e8105fe6b60dd226e21fdc340c3f3b41fd4e3b6968
-
Size
871KB
-
MD5
f8160062e4729922def235fa5f56ecfc
-
SHA1
d069e37aab59f88c5042ed75d69329d3f3a5069f
-
SHA256
c83265957ec46804b42da5e8105fe6b60dd226e21fdc340c3f3b41fd4e3b6968
-
SHA512
91227d067f6b121551dc514d9d28607c877b0a5c34178d8a456f821bf24481750a8364f7245b443d2dec5b4b2407db7a4952995f40f39806ea27999b6fefba62
-
SSDEEP
24576:Jr3tT64c2WZh85CoHO4XmnqcB0ULf1Io:Jr3ZjcRZQLO4Wq6PBI
Malware Config
Signatures
Files
-
c83265957ec46804b42da5e8105fe6b60dd226e21fdc340c3f3b41fd4e3b6968.exe windows x86
73a61b67d92f69408a466f6c59c16901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CancelIo
IsBadCodePtr
ReleaseMutex
lstrlenA
GetStartupInfoA
HeapDestroy
GetEnvironmentVariableA
CreateFileA
CreateFileMappingA
TlsGetValue
TlsAlloc
GetCommandLineW
ResetEvent
SetLastError
GetModuleFileNameA
GetACP
GetModuleHandleA
SetEvent
GetStdHandle
advapi32
IsValidSecurityDescriptor
CreateServiceW
RegQueryValueW
CreateProcessAsUserA
RegCreateKeyExW
ControlService
RegDeleteValueA
IsTextUnicode
IsValidAcl
ClearEventLogW
RegEnumKeyA
IsValidSid
InitializeSid
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ