Static task
static1
Behavioral task
behavioral1
Sample
d1de9211b4b9a66c43ee90bc34e972d17a3696598b1dded88705edcc7736b717.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1de9211b4b9a66c43ee90bc34e972d17a3696598b1dded88705edcc7736b717.exe
Resource
win10v2004-20220812-en
General
-
Target
d1de9211b4b9a66c43ee90bc34e972d17a3696598b1dded88705edcc7736b717
-
Size
249KB
-
MD5
04d593b393472a35f6757c7d9cd5c7e1
-
SHA1
f33d4eff7682c2dcf58f2df45b7d7ea8357af29f
-
SHA256
d1de9211b4b9a66c43ee90bc34e972d17a3696598b1dded88705edcc7736b717
-
SHA512
2bcc2c960fc3649172552dd51ec688a93b840f7323a53b407c7585cc203994990a7d8eb0627f9ae748efd3f91bbee38f8ca208520dfb2843095e37d258ad6a09
-
SSDEEP
6144:N3M3Y92oixoX/XHV6VQgRiNXtPGwAudz1u25O3WOIR:NcRxU/X16cNXPASRuLmOIR
Malware Config
Signatures
Files
-
d1de9211b4b9a66c43ee90bc34e972d17a3696598b1dded88705edcc7736b717.exe windows x86
cd1e7d255f6a8f6133925f28a7ef9d01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
SetEvent
ResumeThread
GetDiskFreeSpaceW
TlsGetValue
GetComputerNameA
CreateThread
LoadLibraryW
HeapCreate
FindAtomA
ResetEvent
GetCommandLineW
GetModuleHandleA
SetLastError
GetExitCodeProcess
CloseHandle
CreateFileA
GetSystemTime
GetTickCount
LocalFree
advapi32
RegEnumValueA
RegEnumKeyExA
CloseEventLog
RegQueryValueA
RegCloseKey
GetFileSecurityA
IsTokenRestricted
CreateServiceW
GetUserNameW
RegCreateKeyExA
GetLengthSid
IsValidAcl
RegDeleteKeyA
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll
WizardFree
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ