Static task
static1
Behavioral task
behavioral1
Sample
023fb4c501dc4bd8cbce793059dc5aad305d542e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
023fb4c501dc4bd8cbce793059dc5aad305d542e.exe
Resource
win10v2004-20220812-en
General
-
Target
023fb4c501dc4bd8cbce793059dc5aad305d542e
-
Size
758KB
-
MD5
0d8c8ef89d55aaedfd577c3d9b6466a3
-
SHA1
023fb4c501dc4bd8cbce793059dc5aad305d542e
-
SHA256
921c1b051c0cacfdbc15c08f845fbe88064f06db26305c99cf706731f8d6f93f
-
SHA512
b46067208d82c3e63dd156f7eedc6987d02ab1c73d5a3b9ab0df6e434aa118bef10a0f3286996b9644acb3e2129481ce1979b72ac23fdf60ba24b27912cc2239
-
SSDEEP
12288:rjSlqMvELylEGQHKj64Y4s227rZ+aYXw9gzqr/nC2eoy5JnKrI7NWN:PMM0Tkd9g/oyXkTN
Malware Config
Signatures
Files
-
023fb4c501dc4bd8cbce793059dc5aad305d542e.exe windows x86
b323c02cc5dab4b3b150bfb4e1c0ac8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapCreate
GetConsoleTitleA
GetCommandLineA
GetTimeFormatA
GetDriveTypeA
VirtualQuery
GetVolumePathNameA
GetCommandLineA
CloseHandle
CancelIo
lstrlenA
HeapDestroy
GetFileAttributesA
GetEnvironmentVariableA
SetLastError
CreateEventA
TlsGetValue
GetModuleHandleA
GetStartupInfoA
advapi32
RegCreateKeyExW
CreateProcessAsUserA
RegEnumKeyA
CreateServiceW
InitializeSid
IsValidSecurityDescriptor
IsValidSid
ControlService
IsTextUnicode
IsValidAcl
RegQueryValueW
RegDeleteValueA
ClearEventLogW
stclient
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 753KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ