Static task
static1
Behavioral task
behavioral1
Sample
954361b4412335ce277bc6b24c3359bc11f63565e0b92c1403f05fcec1ddd9fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
954361b4412335ce277bc6b24c3359bc11f63565e0b92c1403f05fcec1ddd9fc.exe
Resource
win10v2004-20221111-en
General
-
Target
954361b4412335ce277bc6b24c3359bc11f63565e0b92c1403f05fcec1ddd9fc
-
Size
23KB
-
MD5
5b19ea27923d2a9113f436f4ea6687b8
-
SHA1
2713c1ee61136c53395abaada1873f3649c1f0b3
-
SHA256
954361b4412335ce277bc6b24c3359bc11f63565e0b92c1403f05fcec1ddd9fc
-
SHA512
44adac67d4ab0a45c29cfb69d0b874a54b454d8be7e5c6df168c26ae742b7cb27f57f5aeb73bfa4bbd0c72f572818d807840a94584b02d58d417f85752688c0d
-
SSDEEP
384:wvi+yHMuq6p7U1ZGd55GMX/y/KJUsoquYk4cpMMH6t6TqbVOt9yaVWp5+W:mi+yHMt6p9JGMX/cUSH6tBb4tkF
Malware Config
Signatures
Files
-
954361b4412335ce277bc6b24c3359bc11f63565e0b92c1403f05fcec1ddd9fc.exe windows x86
cf7111ed491ae5fcab82d82dd89afa76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
CreateFileA
ResumeThread
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
DeviceIoControl
TerminateProcess
ExitThread
GetTickCount
GetStartupInfoA
GetModuleHandleA
OpenMutexA
ReleaseMutex
CloseHandle
GetTempPathA
WinExec
GetLastError
GetModuleFileNameA
SetFileAttributesA
LoadLibraryA
GetProcAddress
CreateThread
Sleep
lstrlenA
user32
GetDesktopWindow
wsprintfA
advapi32
RegQueryValueExA
CreateServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
shell32
ShellExecuteA
ws2_32
recv
setsockopt
WSAIoctl
__WSAFDIsSet
socket
gethostname
closesocket
select
send
WSAStartup
inet_ntoa
htons
gethostbyname
inet_addr
sendto
WSASocketA
htonl
connect
msvcrt
strcat
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_except_handler3
malloc
realloc
memcpy
strstr
memset
atoi
strcpy
strncpy
strcspn
exit
sprintf
strncmp
strlen
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ