Static task
static1
Behavioral task
behavioral1
Sample
a4f6a6162461b077816189c89ac52f76b6e2d53284c962a1ac5cf83d1401e102.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a4f6a6162461b077816189c89ac52f76b6e2d53284c962a1ac5cf83d1401e102.exe
Resource
win10v2004-20220901-en
General
-
Target
a4f6a6162461b077816189c89ac52f76b6e2d53284c962a1ac5cf83d1401e102
-
Size
8KB
-
MD5
d2b38c2fe8561dec668b344d7570b664
-
SHA1
553f8a4d6a98e4a65fc395e7872fff63c38ac726
-
SHA256
a4f6a6162461b077816189c89ac52f76b6e2d53284c962a1ac5cf83d1401e102
-
SHA512
43c7ae44734e3adf28db703183478ae4ff92459f42dba2e947ace424549ec5442d0652ed4e695df53a55552597726d8968fcecb2c9115b0b12bf44b2d8c32032
-
SSDEEP
96:OkCt8Qpo1QuueNxrzExfNyMdCP8StrPsQKXhNRFURsRHQ7xf4b1EWCNJbWwG:OPt8zhjNBEhkUStrRKnpaxAbuWCNJbW
Malware Config
Signatures
Files
-
a4f6a6162461b077816189c89ac52f76b6e2d53284c962a1ac5cf83d1401e102.exe windows x86
6a84291c4b9ca861fb0478bb17897385
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
StartServiceA
user32
SetWindowTextA
MessageBoxA
GetWindowTextA
GetForegroundWindow
BlockInput
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
CloseHandle
CopyFileA
CreateFileA
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetDriveTypeA
GetFullPathNameA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
LoadLibraryA
LoadResource
RtlZeroMemory
SetFileAttributesA
SetFilePointer
SizeofResource
Sleep
WinExec
wininet
InternetGetConnectedState
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ