Static task
static1
Behavioral task
behavioral1
Sample
d1871ca7debd2df19a30d80302ead31c3f94b6bfa0792d4e27c0d22fd1c3494c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1871ca7debd2df19a30d80302ead31c3f94b6bfa0792d4e27c0d22fd1c3494c.exe
Resource
win10v2004-20221111-en
General
-
Target
d1871ca7debd2df19a30d80302ead31c3f94b6bfa0792d4e27c0d22fd1c3494c
-
Size
108KB
-
MD5
48177fe21c730746a5776b446bc17d04
-
SHA1
7f8cb8e67d65ac797f24876fa4e4c621ac48ba7f
-
SHA256
d1871ca7debd2df19a30d80302ead31c3f94b6bfa0792d4e27c0d22fd1c3494c
-
SHA512
55be5b358cce394a8472ff8f8be876425ae927f3bb49c0f194baff33ac23b5ce0f9da6b0a430e041acb4f8dd075f85fa3a1406fa34677f055e522dbb56187bd4
-
SSDEEP
3072:BtWARNvbvQP3UoRvUa2OO+dJuhXXSoSAsv:eklLQP3UMkZtXw
Malware Config
Signatures
Files
-
d1871ca7debd2df19a30d80302ead31c3f94b6bfa0792d4e27c0d22fd1c3494c.exe windows x86
5891961f90b5ee8652cd6bf4aea930f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
SetHandleCount
SetEndOfFile
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
GetFileSize
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetShortPathNameA
Sleep
GetLastError
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
CopyFileA
SetFileAttributesA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
WriteFile
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
gdi32
GetTextCharsetInfo
advapi32
DeleteService
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ