Static task
static1
Behavioral task
behavioral1
Sample
c29c9060798d3d31ebb75fcef8efa03fa659c699d1416a2be461b5eb89ac7315.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c29c9060798d3d31ebb75fcef8efa03fa659c699d1416a2be461b5eb89ac7315.exe
Resource
win10v2004-20220812-en
General
-
Target
c29c9060798d3d31ebb75fcef8efa03fa659c699d1416a2be461b5eb89ac7315
-
Size
381KB
-
MD5
5171275695f0ba2f95e6d6430bba2997
-
SHA1
cdc7ee797acd04b8e6b3b1391d811b2b53b3993c
-
SHA256
c29c9060798d3d31ebb75fcef8efa03fa659c699d1416a2be461b5eb89ac7315
-
SHA512
939231636e4b9b6dff7bee2574e83c9cdf1ae7173e4e516fab14caa6cd5f04c4920928f0d9a92a9327854e64d91ff5ab2ff6b8a1a7c74833b5d4cf0a88e13867
-
SSDEEP
6144:NpUPgRMD7Tf8iWjhtgYXL7TO6dHyF6EDWVUlMVcZOV6fGhmLjAR73t3ygCkv:NSgRMHTulbq6Vxh8MV9VOpO73tokv
Malware Config
Signatures
Files
-
c29c9060798d3d31ebb75fcef8efa03fa659c699d1416a2be461b5eb89ac7315.exe windows x86
eb189467981bb2a77b09612a0d875a0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
FindVolumeClose
GetExitCodeProcess
LocalFree
ResumeThread
CreateMutexA
WriteFile
GlobalFree
GetPrivateProfileIntW
lstrlenA
InterlockedExchange
GetStdHandle
GetEnvironmentVariableW
VirtualAlloc
GlobalSize
GetACP
CloseHandle
GetCommandLineA
GetModuleHandleW
ResetEvent
advapi32
ControlService
IsValidAcl
ClearEventLogA
RegEnumKeyW
RegDeleteKeyA
RegCreateKeyExW
IsValidSid
RegDeleteValueA
IsTextUnicode
RegCloseKey
RegQueryValueW
CreateServiceA
CloseEventLog
admparse
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
AdmClose
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ