Static task
static1
Behavioral task
behavioral1
Sample
6821938c105289bc419fc6da5cca8186b75962108a4c058591c3a42e04c99cf9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6821938c105289bc419fc6da5cca8186b75962108a4c058591c3a42e04c99cf9.exe
Resource
win10v2004-20220812-en
General
-
Target
6821938c105289bc419fc6da5cca8186b75962108a4c058591c3a42e04c99cf9
-
Size
380KB
-
MD5
9253b4ab88e5a94d702c860dfae3918c
-
SHA1
6c0efc49142e46fb0ecd9aef58bb09d19aa58001
-
SHA256
6821938c105289bc419fc6da5cca8186b75962108a4c058591c3a42e04c99cf9
-
SHA512
8168a73f41f806565061ad3bfaa3415fd046d66f99d2cf5415d1a5c1042e51662ec89f06164012baff905650940c72430e420633ef47f40febb121ea12874687
-
SSDEEP
6144:cOL18+URMliWjhtgYXL7TO6dHyF6EDWVUlMVcZOV6fGhmLjAR73t3ygCkv:cOZ8+URMDlbq6Vxh8MV9VOpO73tokv
Malware Config
Signatures
Files
-
6821938c105289bc419fc6da5cca8186b75962108a4c058591c3a42e04c99cf9.exe windows x86
a6797996dcab1c908e098b5d57642a5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetCommandLineA
GetModuleHandleW
FindVolumeClose
GetACP
ResumeThread
LocalFree
ResetEvent
lstrlenA
CreateMutexA
GlobalFree
WriteFile
GetPrivateProfileIntW
VirtualAlloc
CreateEventA
CloseHandle
GetStdHandle
GetExitCodeProcess
GetEnvironmentVariableW
GlobalSize
advapi32
RegEnumKeyW
ControlService
IsValidAcl
RegQueryValueW
RegDeleteValueA
IsTextUnicode
RegDeleteKeyA
RegCreateKeyExW
CloseEventLog
IsValidSid
ClearEventLogA
RegCloseKey
CreateServiceA
amstream
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ