Static task
static1
Behavioral task
behavioral1
Sample
0e9bdf9a6e8c9d4ce47546ae401b068c8ab626d3d2ed762e25acd00b3e3ae8aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e9bdf9a6e8c9d4ce47546ae401b068c8ab626d3d2ed762e25acd00b3e3ae8aa.exe
Resource
win10v2004-20220901-en
General
-
Target
0e9bdf9a6e8c9d4ce47546ae401b068c8ab626d3d2ed762e25acd00b3e3ae8aa
-
Size
197KB
-
MD5
61c3bceb460ca87c29362dd4ea5a3a8f
-
SHA1
dd87203cd16882e6a0612fedf274b778f7ebf57e
-
SHA256
0e9bdf9a6e8c9d4ce47546ae401b068c8ab626d3d2ed762e25acd00b3e3ae8aa
-
SHA512
33a9b9bd0668155e91d6d3fdcc5f44d5bc99e075916abe87878a4d088d445d87fa1f1b6226c1464862887b6bb4dc0314dd4fdeb13baf3fec33da1ce01e9d583c
-
SSDEEP
6144:fFxkR2kKM8wLBrcgJBr9i8ydGWFtGbuiSCIIbaZgq+Geq:48wVVaYmkI6n0
Malware Config
Signatures
Files
-
0e9bdf9a6e8c9d4ce47546ae401b068c8ab626d3d2ed762e25acd00b3e3ae8aa.exe windows x86
2e37a1c0919a461263bd306a4dcc08d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAEnumNextCertType
CAFreeCertTypeProperty
CASetCertTypeProperty
CAAddCACertificateType
CASetCertTypeKeySpec
CARemoveCACertificateType
CAEnumCertTypesForCA
CAGetCertTypeProperty
CACloseCA
CAGetCertTypeKeySpec
CAUpdateCertType
CAUpdateCA
CAGetCertTypePropertyEx
CAGetCAProperty
CAFindByName
CASetCertTypeFlags
CAFindCertTypeByName
CACreateCertType
CACertTypeSetSecurity
CAGetCertTypeExtensions
CACloseCertType
CACertTypeGetSecurity
CAEnumCertTypes
CAGetCertTypeFlags
CAFreeCAProperty
CASetCertTypeExtension
CAFreeCertTypeExtensions
msvcrt
_wcsupr
__RTDynamicCast
wcscpy
_except_handler3
wcstoul
_wcsicmp
wcscat
wcscmp
wcsrchr
vswprintf
wcschr
wcsstr
wcslen
??2@YAPAXI@Z
free
_adjust_fdiv
??3@YAXPAX@Z
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_purecall
__dllonexit
malloc
_initterm
_onexit
mbstowcs
memmove
user32
GetDC
EnableWindow
PostMessageW
SendMessageW
LoadBitmapW
LoadImageW
SetCursor
InsertMenuItemW
GetDlgItem
GetParent
SetDlgItemTextW
LoadCursorW
LoadStringW
SetFocus
SetWindowLongW
GetDlgItemTextA
SetWindowTextW
SystemParametersInfoW
LoadIconW
EndDialog
RegisterClipboardFormatW
wsprintfW
WinHelpW
ReleaseDC
SendDlgItemMessageW
MessageBoxW
DialogBoxParamW
GetWindowLongW
kernel32
LoadLibraryW
GetACP
OutputDebugStringA
GetStartupInfoA
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetSystemTimeAsFileTime
lstrcpyW
GetSystemWindowsDirectoryW
SetLastError
GlobalLock
GetModuleHandleA
RemoveDirectoryA
LocalReAlloc
GetLastError
lstrcmpiW
InitializeCriticalSection
FileTimeToLocalFileTime
GetEnvironmentStringsW
CloseHandle
IsBadReadPtr
FormatMessageW
GetDateFormatW
GetSystemDefaultLangID
GlobalUnlock
GlobalAlloc
CreateFileW
GlobalFree
LocalFree
QueryPerformanceCounter
DeleteCriticalSection
WideCharToMultiByte
GetComputerNameW
GetModuleFileNameW
GetCurrentProcess
GetTickCount
SetUnhandledExceptionFilter
FileTimeToSystemTime
advapi32
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ