Static task
static1
Behavioral task
behavioral1
Sample
975f25f8f7d816da463e920ef5295a3d2a926952f41c0af3e27d56d24d191448.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
975f25f8f7d816da463e920ef5295a3d2a926952f41c0af3e27d56d24d191448.exe
Resource
win10v2004-20221111-en
General
-
Target
975f25f8f7d816da463e920ef5295a3d2a926952f41c0af3e27d56d24d191448
-
Size
821KB
-
MD5
3a84948d213594d7b43b25a1a2b29e3f
-
SHA1
53a3ab58450635625c9d0178b5c2f92612caffa3
-
SHA256
975f25f8f7d816da463e920ef5295a3d2a926952f41c0af3e27d56d24d191448
-
SHA512
93b062aefbe5aefdd2f0b9fc83005d5724be85a5c0942a8c72f54622872371315340aa144cafbeb6324ba9300f2727eeb58d8b6d84d42295731c789d9f2a4a14
-
SSDEEP
24576:rRMkPQDD5Egs6aLwgO1lSAxQMB1VhWx4Mje+MuyC2lMr:rRMkPQDdGvanxD36x4MPMu6+
Malware Config
Signatures
Files
-
975f25f8f7d816da463e920ef5295a3d2a926952f41c0af3e27d56d24d191448.exe windows x86
049951c00266123a2adb5634ba40c406
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
ReleaseMutex
CloseHandle
GetCurrentThreadId
FreeConsole
GetPrivateProfileIntA
GetEnvironmentVariableW
LocalFree
SuspendThread
CreateEventW
GetSystemInfo
LoadLibraryW
WriteFile
GetStdHandle
ResetEvent
lstrlenA
VirtualAllocEx
GlobalFree
GlobalFlags
CreateMutexW
advapi32
ControlService
RegQueryValueW
CreateServiceW
RegEnumKeyA
InitializeSid
RegDeleteValueA
RegCloseKey
CloseEventLog
IsValidSecurityDescriptor
IsValidSid
ClearEventLogW
RegCreateKeyExW
IsTextUnicode
InitializeSid
iernonce
InitCallback
InitCallback
InitCallback
InitCallback
InitCallback
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ