Static task
static1
Behavioral task
behavioral1
Sample
67e87f27383ee2149a33a2be30d30ef2d3397284fd5baf05fcbc76fbcee149af.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67e87f27383ee2149a33a2be30d30ef2d3397284fd5baf05fcbc76fbcee149af.exe
Resource
win10v2004-20221111-en
General
-
Target
67e87f27383ee2149a33a2be30d30ef2d3397284fd5baf05fcbc76fbcee149af
-
Size
382KB
-
MD5
42bdcf0479fb4502f4edc52a64012727
-
SHA1
efb8f6bed2a59b7a681affb0d096c002d011507e
-
SHA256
67e87f27383ee2149a33a2be30d30ef2d3397284fd5baf05fcbc76fbcee149af
-
SHA512
b7790488239640eca5fae86e81bde1e3445b23a0c120a395ec68774961191608db6a9868e436f4c6f7f1519911aaddffcfa6cf1e82d60eef72e64c316d815671
-
SSDEEP
6144:Phd4LRMY6y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:PhdwRMYpAGliLy8hAEWZ+7TSHRKSgFBl
Malware Config
Signatures
Files
-
67e87f27383ee2149a33a2be30d30ef2d3397284fd5baf05fcbc76fbcee149af.exe windows x86
c6af470a958ade9feec3bf238d53d04c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
ResetEvent
lstrlenA
GetCommandLineW
ReleaseMutex
CloseHandle
GetSystemInfo
GetEnvironmentVariableA
FreeConsole
WriteFile
GlobalFree
CreateMutexW
LocalFree
LoadLibraryW
GetStdHandle
GetPrivateProfileIntA
InterlockedExchange
VirtualAllocEx
LocalSize
CreateEventW
advapi32
IsTextUnicode
ClearEventLogW
CreateServiceW
IsValidSecurityDescriptor
CloseEventLog
RegEnumKeyA
InitializeSid
ControlService
RegDeleteValueA
IsValidSid
RegCreateKeyExW
RegCloseKey
RegQueryValueW
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ