Static task
static1
Behavioral task
behavioral1
Sample
19cd7ad7229f202403df4755e341f3b8856150a773217ea70fe7c8be52ad8fcf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
19cd7ad7229f202403df4755e341f3b8856150a773217ea70fe7c8be52ad8fcf.exe
Resource
win10v2004-20220414-en
General
-
Target
19cd7ad7229f202403df4755e341f3b8856150a773217ea70fe7c8be52ad8fcf
-
Size
142KB
-
MD5
70780b64e4a6d98605af8971d4c087ea
-
SHA1
862b12cfea6bf1c5e636f58e8bcdaf89482c94af
-
SHA256
19cd7ad7229f202403df4755e341f3b8856150a773217ea70fe7c8be52ad8fcf
-
SHA512
cbdfdf35c0f31aaf4870709aa07c3c93edf8c5b504d39f44838e9ffc4d7eeee3483e9c3a6c98a92d1fcdbb3e0e585127f0635c535575faa2509f9dbd54ac3950
-
SSDEEP
3072:VEeq3lkCkuJSyUMbB1Ldi3o8VPeBFCkjkDPk6/lJk:VC1kCkuP/d1xi4oPsCkjkDPkqk
Malware Config
Signatures
Files
-
19cd7ad7229f202403df4755e341f3b8856150a773217ea70fe7c8be52ad8fcf.exe windows x86
180d7cc180df69306599a0db60d8f0cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
resutils
ResUtilGetBinaryValue
ClusWorkerStart
ResUtilDupString
ClusWorkerTerminate
certcli
CACloseCA
CACloseCertType
CADeleteCA
CAEnumNextCA
advapi32
ReadEventLogA
RegUnLoadKeyW
RegRestoreKeyW
RegCreateKeyExW
RegLoadKeyW
OpenEventLogA
RegOpenKeyA
RegSaveKeyA
LogonUserA
RegEnumKeyA
RegDeleteValueW
kernel32
EnterCriticalSection
LoadLibraryExW
SearchPathA
OpenFileMappingA
lstrlen
GetDateFormatA
GetCommandLineA
GetModuleHandleA
GetShortPathNameA
GetCurrentThreadId
WaitForSingleObject
lstrcat
MoveFileA
CreateMailslotW
GetProcAddress
GetSystemDirectoryW
user32
LoadMenuA
GetDlgItemTextA
GetPropW
DrawStateW
LoadBitmapW
LoadIconA
CharToOemW
FindWindowA
InsertMenuW
LoadCursorA
wsprintfA
DialogBoxParamA
IsCharLowerA
CreateWindowExW
PeekMessageW
cmutil
CmMalloc
CmRealloc
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 693B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ