Static task
static1
Behavioral task
behavioral1
Sample
7917D1EEEA34A2873895.8933.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7917D1EEEA34A2873895.8933.exe
Resource
win10v2004-20230220-en
General
-
Target
7917D1EEEA34A2873895.8933.exe
-
Size
173KB
-
MD5
8305b0fabcd27917d1eeea34a2873895
-
SHA1
2b990b22eeee0a79df1845d82aff37edfcc03ee3
-
SHA256
9959b01bd7ff2682cb03860c615b572916d1c8f6375cb7cf07b03e9c0b49e53f
-
SHA512
9204895afb1113b3cb46c9e37af742fbc9cf5bd3a3bad98c8572c90fb6e3000e7d9118ea0e2bfab2dcf789f93caf37b984d0adb511beca66e74d48faebd27631
-
SSDEEP
3072:vUVTZogksgyiFFJkmJBYX/LoxcsxCijvzgS+a:vUV+JmmJBYX/Lo2sgi4S7
Malware Config
Signatures
Files
-
7917D1EEEA34A2873895.8933.exe.exe windows x86
cd0eb3b5fba19e19948643a036a28db7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
FindClose
GetModuleHandleA
CloseHandle
Sleep
ReleaseMutex
FindAtomA
GetDiskFreeSpaceA
GetCalendarInfoA
SetEvent
TlsGetValue
GetLastError
FindVolumeClose
lstrlenA
SearchPathA
GetTickCount
GetStartupInfoA
FindResourceExA
DeleteCriticalSection
VirtualProtect
advapi32
RegEnumKeyExA
RegLoadKeyA
RegCreateKeyExA
FreeSid
RegCloseKey
OpenEventLogA
LsaClose
IsValidSid
CloseEventLog
CloseTrace
LsaSetSecret
LsaFreeMemory
AccessCheck
GetFileSecurityA
RegCloseKey
msdtcuiu
DtcPerfOpen
DllGetClassObject
DtcPerfClose
DtcPerfCollect
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ