Static task
static1
Behavioral task
behavioral1
Sample
7a902a439edf08576b10ca965786afc17ce6b4dbf1b4d4f56c482d2185e05624.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a902a439edf08576b10ca965786afc17ce6b4dbf1b4d4f56c482d2185e05624.exe
Resource
win10v2004-20220812-en
General
-
Target
7a902a439edf08576b10ca965786afc17ce6b4dbf1b4d4f56c482d2185e05624
-
Size
297KB
-
MD5
571b5354edb40b4bf88b551ae4075e94
-
SHA1
695f062c4ab77aac28310549cbb7782cb1af428e
-
SHA256
7a902a439edf08576b10ca965786afc17ce6b4dbf1b4d4f56c482d2185e05624
-
SHA512
40740550fa533ad11c460556183704b352bdd71653be97e3b5b587a2b57098031a47e1949ce2b387eac2c414462b577d27cc74cf7e9da0a3501bc03396fbed0f
-
SSDEEP
6144:QSj30QRmxcbyk+vCznkzh0rUl/Qs8u/pmvFNWY/5DtTO6ewx:D3dA0y7akzh0rU+IAQiTe
Malware Config
Signatures
Files
-
7a902a439edf08576b10ca965786afc17ce6b4dbf1b4d4f56c482d2185e05624.exe windows x86
e99ce08c7b32bc6efb76f976e49258e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LocalFree
SuspendThread
GetFileAttributesA
GetCommandLineW
LoadLibraryW
GetModuleHandleA
GetSystemTime
ResetEvent
HeapCreate
CreateThread
FindAtomA
GetDiskFreeSpaceW
GetTickCount
SetLastError
CreateFileA
GetExitCodeProcess
TlsGetValue
SetEvent
GetComputerNameA
advapi32
GetLengthSid
RegDeleteKeyA
RegCreateKeyExA
CreateServiceW
RegCloseKey
CredFree
RegQueryValueA
IsTokenRestricted
CloseEventLog
GetUserNameW
RegEnumKeyExA
RegEnumValueA
GetFileSecurityA
cryptui
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ