Static task
static1
Behavioral task
behavioral1
Sample
f8a705a55e66afa1c8df4b176e254ac10d834b463f4c939b17e6c0f2ef193ad6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8a705a55e66afa1c8df4b176e254ac10d834b463f4c939b17e6c0f2ef193ad6.exe
Resource
win10v2004-20220812-en
General
-
Target
f8a705a55e66afa1c8df4b176e254ac10d834b463f4c939b17e6c0f2ef193ad6
-
Size
333KB
-
MD5
999bdd71d187e23fe7362a2485b98825
-
SHA1
7dbe2f4e56f7ae785565124384bce915cc6a32f8
-
SHA256
f8a705a55e66afa1c8df4b176e254ac10d834b463f4c939b17e6c0f2ef193ad6
-
SHA512
659572c0020790df81aeb534b35aa6ffc54d7b94d622b03ab0eb87f1668b0adc45f7c6d0fc8b2ee76b391996e2b8a49e2aaa3499ac513edabc4f6dc328e78717
-
SSDEEP
6144:L/IW4JMsvY8nHmKGuRvvFuSJvbWjw960RDvbjJD2VJq4r+G:LMJMGmVuRvdnJvbWjw9601bqBf
Malware Config
Signatures
Files
-
f8a705a55e66afa1c8df4b176e254ac10d834b463f4c939b17e6c0f2ef193ad6.exe windows x86
b2f92e151b604a0c59c20b7089df0ea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetDiskFreeSpaceA
ResumeThread
DeleteCriticalSection
CreateHardLinkA
HeapDestroy
GetLastError
SearchPathA
GetThreadLocale
VirtualProtect
GetStartupInfoA
ReleaseMutex
GetTickCount
ExitProcess
GetModuleHandleA
CloseHandle
SetEvent
Sleep
TlsGetValue
lstrcmpiA
advapi32
FreeSid
CloseTrace
LsaFreeMemory
IsValidSid
RegEnumKeyExA
GetFileSecurityA
LsaSetSecret
OpenEventLogA
RegCreateKeyExA
CloseEventLog
LsaClose
AccessCheck
RegCloseKey
RegLoadKeyA
cfgmgr32
CM_Delete_Range
CM_Add_Range
CM_First_Range
CM_Add_IDA
CM_Get_Child
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ