Static task
static1
Behavioral task
behavioral1
Sample
b84539db4da5825366b02a19da66a0f43ddeb8cfebd1e4e7c30c03230855c731.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b84539db4da5825366b02a19da66a0f43ddeb8cfebd1e4e7c30c03230855c731.exe
Resource
win10v2004-20221111-en
General
-
Target
b84539db4da5825366b02a19da66a0f43ddeb8cfebd1e4e7c30c03230855c731
-
Size
52KB
-
MD5
e553b524eeeb708739c120695e585ff2
-
SHA1
50d2f7e0c481e721b913294a6bc9dd80edda36ce
-
SHA256
b84539db4da5825366b02a19da66a0f43ddeb8cfebd1e4e7c30c03230855c731
-
SHA512
2de9656d875611134907967c75c32782b1629fd0f9c29e1102926d41fc59ae2a0e9c213b75b7225fddd420aa19d1f247ddf8345db20b353b218b561373e4a362
-
SSDEEP
1536:3a36TdgdEfjuA+WvoyqVHtk+hfVsyGot117FdymlP:3a36Rg4RAyqNtkMs+B7F4ml
Malware Config
Signatures
Files
-
b84539db4da5825366b02a19da66a0f43ddeb8cfebd1e4e7c30c03230855c731.exe windows x86
bcf01a4ba6b4e2185ca2986872617a0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ExitWindowsEx
advapi32
OpenProcessToken
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegSetValueExA
kernel32
GetModuleFileNameA
GetVersionExA
GetLastError
CreateMutexA
CloseHandle
WriteFile
lstrlenA
CreateFileA
lstrcatA
lstrcpyA
GetEnvironmentVariableA
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CreateProcessA
MoveFileExA
CopyFileA
GetWindowsDirectoryA
GetSystemDirectoryA
shell32
ShellExecuteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 362B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ