Static task
static1
Behavioral task
behavioral1
Sample
155489f24b1ce4c015689ed27e37841c2123fec1a69d3b6974437301bc1036de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
155489f24b1ce4c015689ed27e37841c2123fec1a69d3b6974437301bc1036de.exe
Resource
win10v2004-20220901-en
General
-
Target
155489f24b1ce4c015689ed27e37841c2123fec1a69d3b6974437301bc1036de
-
Size
325KB
-
MD5
fbd5d7fe727fb41d6e3442eb798910b1
-
SHA1
a8bf65ade247c1ecaab0dba63818aea7f010327f
-
SHA256
155489f24b1ce4c015689ed27e37841c2123fec1a69d3b6974437301bc1036de
-
SHA512
56c2881f79c686538584c63c6531dc9b71bb34be765e257670305a9f6d290a0b5ffb917bf83eba6fe061e22dfbd0d73347ce5aa70d0d32d65827715527c55330
-
SSDEEP
6144:+gpd5NG3XXnRI2RZfdM5rkVYIWNJnXyEtBfCvoK8CUmt6CAWctDpv:+gP/IXRIGdMNkiIEJnXWzbUVtWctDpv
Malware Config
Signatures
Files
-
155489f24b1ce4c015689ed27e37841c2123fec1a69d3b6974437301bc1036de.exe windows x86
cbea90da7f463157ac55686475029e73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetExitCodeProcess
GetTickCount
SetLastError
CreateThread
GetDiskFreeSpaceW
CreateFileA
GetModuleHandleA
GetFileAttributesA
LoadLibraryW
FindAtomA
ResetEvent
HeapCreate
GetComputerNameA
TlsGetValue
GetSystemTime
SetEvent
SuspendThread
GetCommandLineW
CloseHandle
advapi32
RegDeleteKeyA
RegCloseKey
IsTokenRestricted
RegEnumKeyExA
CredFree
CloseEventLog
RegQueryValueA
GetFileSecurityA
GetUserNameW
RegCreateKeyExA
CreateServiceW
RegEnumValueA
GetLengthSid
cryptui
WizardFree
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ