Static task
static1
Behavioral task
behavioral1
Sample
d14fc630a21ae98649ed45e3374221483763fd4d2495807cfe3be76a033fe865.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d14fc630a21ae98649ed45e3374221483763fd4d2495807cfe3be76a033fe865.exe
Resource
win10v2004-20220812-en
General
-
Target
d14fc630a21ae98649ed45e3374221483763fd4d2495807cfe3be76a033fe865
-
Size
385KB
-
MD5
b07a40624612653fc96d447ff1ec8218
-
SHA1
70e6c6f8971d75db22d556611b9f7f1822aaa101
-
SHA256
d14fc630a21ae98649ed45e3374221483763fd4d2495807cfe3be76a033fe865
-
SHA512
b3f6cbd1c500a41546049f01401ce3df40b8f2904bcf313d0d7589ce9f6bfbd3e2dced1b1d4fdcb1b9efc02c0a9431afe011c9fe809cde8fa2c56acf04693a31
-
SSDEEP
6144:FkOgQBOi1KGZ7Njs4WO3uimJhBiX8zTM3zrKAO22j:eLQv1PhNjsiDMkzrT
Malware Config
Signatures
Files
-
d14fc630a21ae98649ed45e3374221483763fd4d2495807cfe3be76a033fe865.exe windows x86
31013151d7802a4e91784d21661e1a1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetStdHandle
LocalFree
ResumeThread
FindVolumeClose
GetEnvironmentVariableW
GlobalFree
InterlockedExchange
GetPrivateProfileIntW
GetModuleHandleW
CreateMutexA
ResetEvent
GetACP
CreateEventA
GetCommandLineA
GetExitCodeProcess
WriteFile
VirtualAlloc
lstrlenA
GlobalSize
advapi32
CreateServiceA
RegQueryValueA
IsValidAcl
RegDeleteKeyA
RegDeleteValueA
ClearEventLogA
RegCreateKeyExA
LsaClose
IsTextUnicode
IsValidSid
ControlService
RegEnumKeyA
RegCloseKey
mspatcha
GetFilePatchSignatureA
GetFilePatchSignatureA
ApplyPatchToFileA
GetFilePatchSignatureA
GetFilePatchSignatureA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ