Static task
static1
Behavioral task
behavioral1
Sample
acbe4343a8463d6da573f4dc26c7514a4b07ddda35517ead3de4c5dc660b8680.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
acbe4343a8463d6da573f4dc26c7514a4b07ddda35517ead3de4c5dc660b8680.exe
Resource
win10v2004-20220901-en
General
-
Target
acbe4343a8463d6da573f4dc26c7514a4b07ddda35517ead3de4c5dc660b8680
-
Size
499KB
-
MD5
80e7a4911b4486279ae3ca228b25b65b
-
SHA1
9e5e5148376134b815b060859a2e61c31df9d068
-
SHA256
acbe4343a8463d6da573f4dc26c7514a4b07ddda35517ead3de4c5dc660b8680
-
SHA512
eaef7ba86059bd0d42b14a8a93a66c886985dc7dfb020561ff66ef297f9f4fc0839c06f7c4bf0dc3e5fa633255d79dd572f70fb9d1fb72aaea6cad224cdb4bf7
-
SSDEEP
6144:AYH/+A65HJx5s9XJI/5FA0OZUFgkcjNE/sLZ4P+gufZd5Yw7rc9:Lx66XJIRFA7UfcjNUYZk+Tv7
Malware Config
Signatures
Files
-
acbe4343a8463d6da573f4dc26c7514a4b07ddda35517ead3de4c5dc660b8680.exe windows x86
aaad3101bc3ceefe61068764ee39be5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
TlsAlloc
GetStartupInfoA
GetStdHandle
GetEnvironmentVariableA
lstrlenA
CreateFileA
TlsGetValue
ReleaseMutex
CreateFileMappingA
IsBadStringPtrA
CancelIo
HeapDestroy
GetModuleHandleA
ResetEvent
GetModuleFileNameA
HeapCreate
ResumeThread
SetEvent
GetCommandLineW
advapi32
CreateServiceW
IsValidSecurityDescriptor
IsValidAcl
RegCreateKeyExW
ControlService
CreateProcessAsUserA
InitializeSid
RegDeleteValueA
RegEnumKeyA
IsValidSid
IsTextUnicode
RegQueryValueW
ClearEventLogW
tspkg
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ