Static task
static1
Behavioral task
behavioral1
Sample
c384c18c671436f2f915984b2466590d659a8bcb89dcc16e72881a01ad339111.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c384c18c671436f2f915984b2466590d659a8bcb89dcc16e72881a01ad339111.exe
Resource
win10v2004-20221111-en
General
-
Target
c384c18c671436f2f915984b2466590d659a8bcb89dcc16e72881a01ad339111
-
Size
217KB
-
MD5
f36239a758970be4b80bb487cbb4cf8b
-
SHA1
03d957690a5e1181f09318b6db211e1d7aec093f
-
SHA256
c384c18c671436f2f915984b2466590d659a8bcb89dcc16e72881a01ad339111
-
SHA512
176e31ef8bbe30a39381eb35e50cfed8613a40110f31dec609129227e38bbf449e4a3aa68164b6b703648a01338ed8239862f52ad5a8d71ef5b1f2b6c74a57e2
-
SSDEEP
1536:ahDehNw7KqB7nTMCKEAxAs3XekIn8m461Qadr9cUhrEgvDd66eC/nyZ2jh:a1NoCKELKufn8mlV9bym1K4h
Malware Config
Signatures
Files
-
c384c18c671436f2f915984b2466590d659a8bcb89dcc16e72881a01ad339111.exe windows x86
16e17cebf2d12e822e8b01a0a18f93d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VirtualAlloc
CreateFileW
GetSystemDirectoryW
LocalAlloc
SetLastError
GetSystemDefaultLCID
InterlockedIncrement
lstrcmpiW
GetExitCodeProcess
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
lstrcatW
user32
GetSystemMetrics
GetSysColor
msvcrt
_adjust_fdiv
_c_exit
_controlfp
__p__commode
__setusermatherr
_initterm
__p__fmode
_acmdln
exit
_cexit
__set_app_type
_except_handler3
__getmainargs
_XcptFilter
_exit
atoi
wcschr
wcsrchr
_vsnwprintf
free
malloc
wcslen
advapi32
RegOpenKeyW
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
DeregisterEventSource
ReportEventA
RegDeleteValueA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data5 Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rr4 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
rr3 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
rr2 Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
rr Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.text14 Size: 1024B - Virtual size: 621B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text19 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ