Static task
static1
Behavioral task
behavioral1
Sample
9273cb6b59cfccac87c4599a5f348f09a26300343493ba275563ee196fcb5524.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9273cb6b59cfccac87c4599a5f348f09a26300343493ba275563ee196fcb5524.exe
Resource
win10v2004-20221111-en
General
-
Target
9273cb6b59cfccac87c4599a5f348f09a26300343493ba275563ee196fcb5524
-
Size
382KB
-
MD5
3d0936e63e1d444f973336a36a29d244
-
SHA1
0d1fe88d16831cc185424d4e16dae764f68299b4
-
SHA256
9273cb6b59cfccac87c4599a5f348f09a26300343493ba275563ee196fcb5524
-
SHA512
0574375a905f0b0abf84cea9d5fcfd7e83ba9b1a3c3fe62776d4d3e27f0a3647dfe0176b85831fbd001e6c3dd7144158c6a495781961e8df28d0ae7c67cdb25c
-
SSDEEP
6144:Mqw7SfXuRMj66y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:27SfXuRMj6pAGliLy8hAEWZ+7TSHRKSm
Malware Config
Signatures
Files
-
9273cb6b59cfccac87c4599a5f348f09a26300343493ba275563ee196fcb5524.exe windows x86
17d3d8454bba29b009e70718c293f1ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
CloseHandle
InterlockedExchange
ResetEvent
GetCommandLineW
GetEnvironmentVariableA
GetStdHandle
VirtualAllocEx
lstrlenA
FreeConsole
GetPrivateProfileIntA
CreateEventW
CreateMutexW
SuspendThread
LocalSize
ReleaseMutex
WriteFile
LocalFree
GlobalFree
GetSystemInfo
advapi32
RegEnumKeyA
IsValidSid
InitializeSid
RegDeleteValueA
CreateServiceW
ClearEventLogW
CloseEventLog
RegCloseKey
IsTextUnicode
IsValidSecurityDescriptor
ControlService
RegQueryValueW
RegCreateKeyExW
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ