Static task
static1
Behavioral task
behavioral1
Sample
08a248de098e0f9edec425ce37d13c827eaf4c54c93182f4ddf1c5b3801cf540.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08a248de098e0f9edec425ce37d13c827eaf4c54c93182f4ddf1c5b3801cf540.exe
Resource
win10v2004-20230221-en
General
-
Target
08a248de098e0f9edec425ce37d13c827eaf4c54c93182f4ddf1c5b3801cf540.exe
-
Size
52KB
-
MD5
811bd70aa6d099716b49794870c07b7d
-
SHA1
ff11360f6ad22ba2629489ac286b6fdf4190846e
-
SHA256
08a248de098e0f9edec425ce37d13c827eaf4c54c93182f4ddf1c5b3801cf540
-
SHA512
f946b9003e16edb63004cd1571bb90b79a0fbdd61ccec48aadb0617cf1e0fe0e3fedbc6ae7bb97d1fd975e2616e70b7f574e20d986806c4ac8a52da0358d1ae8
-
SSDEEP
768:F4il2db29DxNAqiBPP7ZVVEiofkIHPwpkPZz+pnmiPHRuY:OiW2pAnP7fVXor/PB+si/Ru
Malware Config
Signatures
Files
-
08a248de098e0f9edec425ce37d13c827eaf4c54c93182f4ddf1c5b3801cf540.exe.exe windows x64
83cd5731e13a62cd7a1bd466e201a693
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlNtPathNameToDosPathName
msvcrt
realloc
__C_specific_handler
mbstowcs
malloc
free
_wcsicmp
strrchr
memset
kernel32
GetLastError
SetEvent
WaitForSingleObject
CreateEventW
OutputDebugStringA
WaitForMultipleObjects
ExitProcess
CreateThread
SetThreadPriority
TerminateThread
OpenProcess
GetSystemDirectoryW
VirtualAlloc
VirtualFree
GetModuleFileNameW
CopyFileW
WriteFile
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetExitCodeProcess
ExitThread
GetProcessId
CreateFileA
DeviceIoControl
SetFileAttributesW
FlushFileBuffers
DeleteFileW
CreateFileW
GetCurrentDirectoryW
GetCommandLineA
GetCurrentProcess
CloseHandle
GetProcAddress
GetModuleHandleA
OutputDebugStringW
Sleep
MoveFileW
user32
wsprintfW
advapi32
CreateProcessWithTokenW
GetSidSubAuthority
StartServiceW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
QueryServiceStatusEx
QueryServiceStatus
OpenServiceW
OpenServiceA
OpenSCManagerW
OpenSCManagerA
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfigW
DuplicateTokenEx
RegSetValueExW
RegDeleteKeyExW
RegCreateKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
ImpersonateLoggedOnUser
GetSidSubAuthorityCount
shlwapi
PathFileExistsW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ