Static task
static1
Behavioral task
behavioral1
Sample
b67c4a73d65eb98311531131178f040da870e3d958c0fed04a3a21855e2d5986.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b67c4a73d65eb98311531131178f040da870e3d958c0fed04a3a21855e2d5986.exe
Resource
win10v2004-20221111-en
General
-
Target
b67c4a73d65eb98311531131178f040da870e3d958c0fed04a3a21855e2d5986
-
Size
328KB
-
MD5
89ad0864f79d9fdbf67828fb4fbcecbd
-
SHA1
4f351fb073abd7bc74ecc50fbb63242b56c8aca6
-
SHA256
b67c4a73d65eb98311531131178f040da870e3d958c0fed04a3a21855e2d5986
-
SHA512
40a2ee1dae0037648cc644b66c6e4e9e6a706dc4903659c7c1b02912e0c3b1e9264099d7134f64a1582204b78a41ee4f525cca8fa222701c787584c3624fdd41
-
SSDEEP
6144:EQzUxwuJVn1iwqZ24Mg5G6StUnGJnKwiX0rcHcw3TBUf3zHP5ITn913xbx:gTwf04Mg865GJnMXuecw3TSvbBIT33dx
Malware Config
Signatures
Files
-
b67c4a73d65eb98311531131178f040da870e3d958c0fed04a3a21855e2d5986.exe windows x86
61f266db57352be1bc0e401641edc56c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetDiskFreeSpaceExA
GetCommandLineA
CloseHandle
GetDateFormatA
DeleteCriticalSection
EnumResourceTypesA
GetModuleHandleA
FreeConsole
LoadLibraryExW
SetLastError
GetLastError
VirtualProtect
IsBadReadPtr
FindClose
IsBadStringPtrA
GetDriveTypeW
ResetEvent
CancelIo
TlsGetValue
advapi32
AccessCheck
RegCloseKey
IsValidSid
LsaSetSecret
FreeSid
CloseEventLog
OpenEventLogA
GetFileSecurityA
LsaFreeMemory
RegCreateKeyExA
LsaClose
CloseTrace
RegLoadKeyA
RegCloseKey
osuninst
GetUninstallImageSize
ExecuteUninstall
IsUninstallImageValid
ProvideUiAlerts
RemoveUninstallImage
Sections
.text Size: 3KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ