Static task
static1
Behavioral task
behavioral1
Sample
c8f387423cb4f5d75d4c15da2f7066d07d88863e4283e20a4781461a3f1df03c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8f387423cb4f5d75d4c15da2f7066d07d88863e4283e20a4781461a3f1df03c.exe
Resource
win10v2004-20221111-en
General
-
Target
c8f387423cb4f5d75d4c15da2f7066d07d88863e4283e20a4781461a3f1df03c
-
Size
821KB
-
MD5
50a4f9721655cea242e401735fbd5293
-
SHA1
26f183c2db60fff2a92dc87c5a03830793edf2e8
-
SHA256
c8f387423cb4f5d75d4c15da2f7066d07d88863e4283e20a4781461a3f1df03c
-
SHA512
9ab0c2fb05ce7771cc3e9cb3fd83aa17c971f21054af41922eeb93a24ac25412bd7a6cbce07c6f38983436c7e68405788e66aa8b1d47288d980f44fa5d6308c4
-
SSDEEP
24576:uRMnfhCuVoeHgpORtc1aTfqg40ry+gU6uzlKZB:uRMnf1oeHgpWo2fM0ry+kuRK
Malware Config
Signatures
Files
-
c8f387423cb4f5d75d4c15da2f7066d07d88863e4283e20a4781461a3f1df03c.exe windows x86
c8fbecdcfe7cc30a61c807195b8626dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetEnvironmentVariableW
ReleaseMutex
LoadLibraryW
lstrlenA
CreateEventW
CloseHandle
GetCurrentProcessId
WriteFile
GetPrivateProfileIntA
GlobalFlags
LocalFree
ResetEvent
InterlockedExchange
VirtualAllocEx
SetEvent
GlobalFree
GetLocalTime
IsBadStringPtrA
GetCurrentThreadId
advapi32
ClearEventLogW
IsValidSecurityDescriptor
RegQueryValueW
RegEnumKeyA
IsTextUnicode
InitializeSid
RegDeleteValueA
ControlService
RegCreateKeyExW
IsValidSid
CreateServiceW
CloseEventLog
RegCloseKey
InitializeSid
loghours
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ