Static task
static1
Behavioral task
behavioral1
Sample
c83f95bc145b179109ff436aca41c8baafb83824e9a005ac741fc29c7ac17bfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c83f95bc145b179109ff436aca41c8baafb83824e9a005ac741fc29c7ac17bfc.exe
Resource
win10v2004-20220812-en
General
-
Target
c83f95bc145b179109ff436aca41c8baafb83824e9a005ac741fc29c7ac17bfc
-
Size
382KB
-
MD5
4dc809fa945711a78966cd55bb29e574
-
SHA1
5a3d05a434218180b5f4cf0f9e3ac50f8ed1777d
-
SHA256
c83f95bc145b179109ff436aca41c8baafb83824e9a005ac741fc29c7ac17bfc
-
SHA512
fd0c0d4c0339ab1f4a2c7cd2669b6c83cc4a38e4c8d497fb5dbf038ba0e283d96b803558693b652e3bc1ce8dcd53a4eeb7012fce2214dd6cd40127a16782eafd
-
SSDEEP
6144:Pcj6ofRMa6y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:+FRMapAGliLy8hAEWZ+7TSHRKSgFBl
Malware Config
Signatures
Files
-
c83f95bc145b179109ff436aca41c8baafb83824e9a005ac741fc29c7ac17bfc.exe windows x86
c582ebfe083d6c4b7cd1ca080dbf96f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
GetCommandLineW
ResetEvent
CloseHandle
GlobalFree
LocalFree
GetStdHandle
VirtualAllocEx
LoadLibraryW
InterlockedExchange
GetEnvironmentVariableA
LocalSize
GetPrivateProfileIntA
lstrlenA
SuspendThread
WriteFile
GetSystemInfo
CreateEventW
ReleaseMutex
FreeConsole
advapi32
RegDeleteValueA
ClearEventLogW
CreateServiceW
IsValidSid
ControlService
IsValidSecurityDescriptor
RegCreateKeyExW
IsTextUnicode
RegQueryValueW
RegCloseKey
CloseEventLog
RegEnumKeyA
InitializeSid
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ