Static task
static1
Behavioral task
behavioral1
Sample
acc7fdb276a3a836f6e4358c45f2668a97be75ac3b3fb5972e2c1a43f979cc3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acc7fdb276a3a836f6e4358c45f2668a97be75ac3b3fb5972e2c1a43f979cc3f.exe
Resource
win10v2004-20221111-en
General
-
Target
acc7fdb276a3a836f6e4358c45f2668a97be75ac3b3fb5972e2c1a43f979cc3f
-
Size
382KB
-
MD5
682433eaad765fea0a5ba09ccf7005a9
-
SHA1
3b78bda92be98970ae801f64779a2da8e673989a
-
SHA256
acc7fdb276a3a836f6e4358c45f2668a97be75ac3b3fb5972e2c1a43f979cc3f
-
SHA512
2ca121e63b959f30c4ba013feeb85cf63a6988621a0083fb9b9b24fbcad87fb470819ecb96315e2fd86d4a5947ba13e329db2e3d0d7c5122bc1c6c8b6018424d
-
SSDEEP
6144:ORMhwCQ0TexdCoNSQwMOu/L5NY5k7paog+4gyA1H1zZsQ6psGeDkXMg:ORMhwCQ2exdCGGMOu/iQtUA1A7R
Malware Config
Signatures
Files
-
acc7fdb276a3a836f6e4358c45f2668a97be75ac3b3fb5972e2c1a43f979cc3f.exe windows x86
ea966209549a3fddff708dbebfaf437f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
ReleaseMutex
GetPrivateProfileIntW
ResetEvent
CreateEventA
GetCommandLineA
GlobalFree
CreateMutexA
GetExitCodeProcess
CloseHandle
WriteFile
GetModuleHandleW
GetStdHandle
HeapCreate
lstrlenA
GetACP
GlobalSize
InterlockedExchange
LocalFree
GetEnvironmentVariableW
advapi32
CreateServiceA
RegCloseKey
RegQueryValueW
ControlService
IsValidSid
ClearEventLogW
IsValidSecurityDescriptor
IsTextUnicode
RegDeleteValueA
RegEnumKeyW
RegDeleteKeyA
CloseEventLog
RegCreateKeyExW
btpanui
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ