Static task
static1
Behavioral task
behavioral1
Sample
f2db17b3584f810ef6a77d1ca9a4180c38878cc47d7dbb3ac89e0534a5c70d0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2db17b3584f810ef6a77d1ca9a4180c38878cc47d7dbb3ac89e0534a5c70d0a.exe
Resource
win10v2004-20220812-en
General
-
Target
f2db17b3584f810ef6a77d1ca9a4180c38878cc47d7dbb3ac89e0534a5c70d0a
-
Size
6KB
-
MD5
ee4dd0397fababd525537abcaf66691f
-
SHA1
dcc2843a2cf1b7213bac04ccf825c0ddef8a9c9e
-
SHA256
f2db17b3584f810ef6a77d1ca9a4180c38878cc47d7dbb3ac89e0534a5c70d0a
-
SHA512
f5e14925975a3380575407576e318b7e0dc5db7a6d3f6ae879aeecef6a39681b745b75c822b47efe0dbf598e1b7c3c61e02ebd061626d3ae8652c909c05ac0a9
-
SSDEEP
192:megQJlsOvFXxwnh3JnDJm/OAKTuFRWRROlP4oyn9:m8Jl97wh3J9m/OhuFRWR+4L
Malware Config
Signatures
Files
-
f2db17b3584f810ef6a77d1ca9a4180c38878cc47d7dbb3ac89e0534a5c70d0a.exe windows x86
c8a564f2ccd2d8dab6369aed402c3bab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
DeleteFileA
DeviceIoControl
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
CreateFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcatA
CreateProcessA
OpenProcess
MoveFileExA
VirtualAllocEx
lstrlenA
WriteProcessMemory
Sleep
GetModuleHandleA
GetProcAddress
VirtualFreeEx
CreateRemoteThread
GetModuleFileNameA
GetCurrentProcess
CloseHandle
GetSystemDirectoryA
lstrcmpA
GetLastError
advapi32
AllocateAndInitializeSid
ControlService
QueryServiceStatus
DeleteService
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ChangeServiceConfig2A
OpenServiceA
StartServiceA
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
StartServiceCtrlDispatcherA
shell32
ShellExecuteExA
SHChangeNotify
SHGetSpecialFolderPathA
msvcrt
__p___initenv
_controlfp
strlen
strcat
strcpy
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_strcmpi
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE