Static task
static1
Behavioral task
behavioral1
Sample
f69f69b6138a1ccb71e9e92c181db156be99969701a1c7fb715e1236f6d02286.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f69f69b6138a1ccb71e9e92c181db156be99969701a1c7fb715e1236f6d02286.exe
Resource
win10v2004-20221111-en
General
-
Target
f69f69b6138a1ccb71e9e92c181db156be99969701a1c7fb715e1236f6d02286
-
Size
177KB
-
MD5
09778477b6054c11bfd3bc536f9e71ea
-
SHA1
7201da983e5aaf90c900ed254a4408f11544c715
-
SHA256
f69f69b6138a1ccb71e9e92c181db156be99969701a1c7fb715e1236f6d02286
-
SHA512
59ab118e475f5064725beef0400527313313fa52db0316cdb0f32fd988eb0e16ae8911bdcdf3f2b97733c7b82371966cabf12774a7de63f5620405409bee2dd3
-
SSDEEP
3072:Le3fnbu64u62G2uxTwzEmQsG/55GhdzIxsVh+bMU000toR/ObADWTLbYo:LMu6z62DumosG/55YIWhEMU0IOb1X
Malware Config
Signatures
Files
-
f69f69b6138a1ccb71e9e92c181db156be99969701a1c7fb715e1236f6d02286.exe windows x86
ba802d89edb1802e4f9fd5f5453bd606
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegEnumValueW
RegCreateKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegSetValueExA
RegCreateKeyA
RegDeleteValueW
psapi
GetModuleBaseNameW
ole32
StringFromIID
CoCreateInstance
kernel32
LocalAlloc
lstrlenA
lstrcmpiA
InterlockedCompareExchange
VirtualQueryEx
SetFileAttributesA
LocalFree
WideCharToMultiByte
LoadLibraryW
lstrlenW
GetExitCodeThread
RemoveDirectoryA
CreateDirectoryExA
EnumResourceNamesW
MultiByteToWideChar
CreateEventW
CreateProcessW
DeleteFileA
FindResourceExW
FindClose
LoadLibraryExW
FindFirstFileA
FindNextFileA
HeapSetInformation
GetFileAttributesA
CopyFileW
lstrcmpA
GetTempPathA
lstrcmpiW
DeleteFileW
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ