Static task
static1
Behavioral task
behavioral1
Sample
b816a7de3524083bbbf7cedf25aa6e0dfe357c281c1fd4f10b2455716fe9347b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b816a7de3524083bbbf7cedf25aa6e0dfe357c281c1fd4f10b2455716fe9347b.exe
Resource
win10v2004-20221111-en
General
-
Target
b816a7de3524083bbbf7cedf25aa6e0dfe357c281c1fd4f10b2455716fe9347b
-
Size
108KB
-
MD5
c8fbca162fb524612deb8cf1137a3b75
-
SHA1
08ae9803a171173bfd69253f1d05e85527f5e9e3
-
SHA256
b816a7de3524083bbbf7cedf25aa6e0dfe357c281c1fd4f10b2455716fe9347b
-
SHA512
85b5d6c50755ce6fc595529d5ae6442b02160c9592b3ea2e2034742a5f704c433dcb6d7be7082d323f2854cc8ea16c7003f768c97ce6ecf604090ed177595c8a
-
SSDEEP
1536:FAJAmw5d3sjq65Wssan0pEHL5z4N/8UBBdgJ0GUFDo7Mxv:1mw5d8WJssanjtz4NX+J0GUFDoQxv
Malware Config
Signatures
Files
-
b816a7de3524083bbbf7cedf25aa6e0dfe357c281c1fd4f10b2455716fe9347b.exe windows x86
2a822a8ff634f273d34aab77db3716c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
OpenFileMappingA
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
GetDiskFreeSpaceExA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
GetLogicalDriveStringsA
Sleep
GetLastError
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
SetFileAttributesA
CopyFileA
GetVersionExA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
WriteFile
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
advapi32
ControlService
RegNotifyChangeKeyValue
RegEnumValueA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
DeleteService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ