Static task
static1
Behavioral task
behavioral1
Sample
9053d952d269dfd72470832647eea3d1420545104f16ea3d6bd71ecabd52e392.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9053d952d269dfd72470832647eea3d1420545104f16ea3d6bd71ecabd52e392.exe
Resource
win10v2004-20220812-en
General
-
Target
9053d952d269dfd72470832647eea3d1420545104f16ea3d6bd71ecabd52e392
-
Size
84KB
-
MD5
2c581077f5f7fae17699a5b53c21b730
-
SHA1
fa9b9feb8a792ef9cc2a2b24ca3b17e7fe2eeaa6
-
SHA256
9053d952d269dfd72470832647eea3d1420545104f16ea3d6bd71ecabd52e392
-
SHA512
69375303d5bf7ac5687aec316f1da337acd1bf58b5c6529c69d7b33073b8944608055d618f962b8370e924728b3876f3a6a3fb03760c21619fc081889cf14074
-
SSDEEP
384:r7rdCJy/E1/spjcRsSixMJxmwsH6BPon1QLJdCetR1:rfsU81kpjGsun06BgnkJdh
Malware Config
Signatures
Files
-
9053d952d269dfd72470832647eea3d1420545104f16ea3d6bd71ecabd52e392.exe windows x86
527693414c83123242fb15de8860f251
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ctl3d32
Ctl3dEnabled
Ctl3dCtlColor
certcli
CAEnumNextCA
CADeleteCA
CAEnumCertTypes
CADeleteCertType
CAEnumFirstCA
user32
LoadImageA
GetCaretPos
GetWindowTextA
IsDialogMessageA
PeekMessageA
IsCharLowerA
GetWindowLongA
DrawIcon
SetCursorPos
IsWindow
IsZoomed
DialogBoxParamW
CreateWindowExW
LoadCursorA
DispatchMessageA
CharToOemA
wsprintfA
kernel32
FormatMessageA
GetComputerNameA
GetCurrentProcess
GetCurrentThreadId
GetLongPathNameA
GetFullPathNameA
WriteProcessMemory
GetDateFormatW
FindResourceExA
SetErrorMode
HeapCreate
CreateMutexA
SleepEx
GetNumberFormatW
LoadLibraryA
crypt32
CertFindChainInStore
CertCloseStore
CertCreateContext
CertAlgIdToOID
CertControlStore
CertOpenStore
CryptFindOIDInfo
CertDuplicateStore
CertFreeCRLContext
CertDuplicateCRLContext
CertFindCRLInStore
CertGetNameStringA
CertCreateCRLContext
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 618B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ