Plfnuyt76
Static task
static1
Behavioral task
behavioral1
Sample
0534cae2c207ceadaf65549e06cfea182d3e273005a71a7bbe0e75857e4173e8.exe
Resource
win7-20220414-en
General
-
Target
0534cae2c207ceadaf65549e06cfea182d3e273005a71a7bbe0e75857e4173e8
-
Size
196KB
-
MD5
952a09bc6fb26dec62cd80b7dabb31d3
-
SHA1
fff88505baa22dc5368dc64e74970955d2f47a49
-
SHA256
0534cae2c207ceadaf65549e06cfea182d3e273005a71a7bbe0e75857e4173e8
-
SHA512
10ba2f99f08180e4ff844d0235926dd2c7d8434e96b346ce38048ab746c35808252bb75ea43c32f65bbd1ebc1be11958c3c7093dd6f16825c420adf9ecf6a825
-
SSDEEP
6144:cQYmU2JFD8euKJ7lfJy73cYrDZM8DY8gGTlj:cMU2z8NKJR+rDZM8D5
Malware Config
Signatures
Files
-
0534cae2c207ceadaf65549e06cfea182d3e273005a71a7bbe0e75857e4173e8.exe windows x86
5f5d7f3d576b5fd54d7374e64458a706
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgW
esent
JetIndexRecordCount
wintrust
CryptCATCDFEnumAttributes
rpcrt4
RpcMgmtStopServerListening
NdrInterfacePointerBufferSize
oleaut32
VarI2FromI4
VarI2FromDate
VarDecFromI4
winspool.drv
OpenPrinterW
crypt32
CertIsValidCRLForCertificate
mprapi
MprInfoDelete
cfgmgr32
CM_Enable_DevNode
setupapi
SetupDiSetSelectedDriverA
SetupSetFileQueueFlags
SetupGetTargetPathW
kernel32
GetLastError
GetModuleFileNameA
ResetEvent
CloseHandle
LoadLibraryA
LocalFree
GlobalFree
HeapReAlloc
DeleteTimerQueueTimer
GlobalAlloc
AddRefActCtx
shell32
SHGetFileInfoW
msvcrt
calloc
clusapi
ClusterRegCreateKey
imm32
ImmIsIME
ole32
CreateStreamOnHGlobal
OleLoad
StringFromIID
gdi32
GetNearestPaletteIndex
DeleteMetaFile
PlayMetaFileRecord
CreatePolyPolygonRgn
SetICMProfileA
user32
GetKeyboardState
ChangeDisplaySettingsW
ChangeClipboardChain
SetProcessWindowStation
AttachThreadInput
DefWindowProcA
advapi32
CryptEnumProviderTypesW
CreateWellKnownSid
ws2_32
select
shlwapi
SHCreateShellPalette
PathRemoveExtensionA
winscard
g_rgSCardT1Pci
Exports
Exports
Sections
.rdat Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ