Static task
static1
Behavioral task
behavioral1
Sample
a665b1eeb72e95e1bd7e808e465c20275f92fef5f40690d89b183fb5bbdd11d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a665b1eeb72e95e1bd7e808e465c20275f92fef5f40690d89b183fb5bbdd11d2.exe
Resource
win10v2004-20220901-en
General
-
Target
a665b1eeb72e95e1bd7e808e465c20275f92fef5f40690d89b183fb5bbdd11d2
-
Size
76KB
-
MD5
210492600c290ab7efbf9ab7ccdcb731
-
SHA1
9efea150d8b0055c83b804ce375930ca053ebbf3
-
SHA256
a665b1eeb72e95e1bd7e808e465c20275f92fef5f40690d89b183fb5bbdd11d2
-
SHA512
edd45f08b84ed1741ee593505a53cba3fa8e9f935dec2d41faa1a0bfd918b255492b0ca6737e027f299e1fd318984b2c5745f2b1641315522b7f391e8a2f01e1
-
SSDEEP
1536:el6pSyfk5IsAEQ3YEXqDYFALBfSBSjUPCcxYHyX:el6pffk5I4RU8RKQUKbi
Malware Config
Signatures
Files
-
a665b1eeb72e95e1bd7e808e465c20275f92fef5f40690d89b183fb5bbdd11d2.exe windows x86
dc422fbd5970a7d3562dd3715e761db6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeProcess
GetLastError
SetFileTime
IsBadWritePtr
FormatMessageW
CreatePipe
CreateMutexW
lstrcatA
SetFileTime
lstrcpyA
FindResourceW
InitializeCriticalSection
GetModuleHandleA
LeaveCriticalSection
SetFileTime
GetFileSize
HeapCreate
LoadLibraryA
ReadFile
CloseHandle
GetStartupInfoW
mstscax
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
advapi32
ControlService
RegCreateKeyExW
ClearEventLogW
IsValidSid
CreateProcessAsUserA
RegEnumKeyA
RegQueryValueW
InitializeSid
RegDeleteValueA
IsTextUnicode
IsValidAcl
IsValidSecurityDescriptor
CreateServiceW
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE