Static task
static1
Behavioral task
behavioral1
Sample
c276a0566161ba0bbbe9325922f9370c8ebe55940424d70f5f3cecf62d726670.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c276a0566161ba0bbbe9325922f9370c8ebe55940424d70f5f3cecf62d726670.exe
Resource
win10v2004-20220812-en
General
-
Target
c276a0566161ba0bbbe9325922f9370c8ebe55940424d70f5f3cecf62d726670
-
Size
330KB
-
MD5
0e15571b050ee3a268308b2befbb918d
-
SHA1
3e9f8a60077d7b4316199a93aa5dccf08183829d
-
SHA256
c276a0566161ba0bbbe9325922f9370c8ebe55940424d70f5f3cecf62d726670
-
SHA512
1834e4dc4e1445e26409d700945bacc0ada8ca9252be8953d62a374f026c04291007ec239cc1350013c93b6f1df921c714f8e4deaee01b0a1af9a99010ccd1fc
-
SSDEEP
6144:lYwC3geQe7kRIeP3D5CEushIDYz9e28de6ZQ1hPuA9kgvOnUe8STlX8soOF0:lYJlY3D5pR5e28derT93gN8ST/o
Malware Config
Signatures
Files
-
c276a0566161ba0bbbe9325922f9370c8ebe55940424d70f5f3cecf62d726670.exe windows x86
1b4ef2a2d86787051aa4ed8d0e4c65f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
ReleaseMutex
OpenMutexA
FindClose
VirtualProtect
GetTickCount
GetModuleHandleA
DeleteCriticalSection
GetVersionExW
CloseHandle
CreateMutexA
FindResourceExA
GetCommandLineA
CreateThread
SearchPathA
SetEvent
TlsGetValue
GetLastError
FreeConsole
Sleep
advapi32
RegEnumKeyExA
LsaFreeMemory
EqualSid
OpenEventLogA
GetFileSecurityA
CloseEventLog
LsaSetSecret
CloseTrace
IsValidSid
RegCloseKey
LsaClose
RegCreateKeyExA
RegLoadKeyA
FreeSid
RegCloseKey
loghours
LogonScheduleDialog
DirSyncScheduleDialogEx
DialinHoursDialogEx
DirSyncScheduleDialog
DialinHoursDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ