Static task
static1
Behavioral task
behavioral1
Sample
30dedfda982db0f39edb9c08989fdf95d9ba686ccb981b58df595abaa0e52a3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30dedfda982db0f39edb9c08989fdf95d9ba686ccb981b58df595abaa0e52a3a.exe
Resource
win10v2004-20220812-en
General
-
Target
30dedfda982db0f39edb9c08989fdf95d9ba686ccb981b58df595abaa0e52a3a
-
Size
373KB
-
MD5
59abcbc668ea7bac67243cc4aa4e9cf0
-
SHA1
97f134957f75e5390c7a2d1222f066cd90f10560
-
SHA256
30dedfda982db0f39edb9c08989fdf95d9ba686ccb981b58df595abaa0e52a3a
-
SHA512
abf6e9d7c6ebc647817252d538ff146eb973cadadb2b67985ad070fb0bb6c4cd4c3f37d1966f689cf6bbd6552b288087a3d069fd00ed5807a757a1691ef1425d
-
SSDEEP
6144:ICbgWU+a4ppnEY7HzlrOZN36dhTr5kLrbjD9Mwmc:2FJ0pEYHlr2qdhfmnD9
Malware Config
Signatures
Files
-
30dedfda982db0f39edb9c08989fdf95d9ba686ccb981b58df595abaa0e52a3a.exe windows x86
f6756486199b193c8bbe17aa7e072566
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetCurrentDirectoryA
lstrcpyA
GetSystemTime
GetCurrentThreadId
ResetEvent
GetCommandLineA
lstrlenA
PulseEvent
CloseHandle
GetModuleHandleA
LocalFree
Sleep
LoadLibraryW
CreateFileW
GetComputerNameA
FindClose
UnmapViewOfFile
CreateThread
HeapCreate
user32
CheckRadioButton
GetDC
CreateIcon
FillRect
GetDlgItem
GetCaretPos
CreateWindowExA
SetFocus
IsWindow
DispatchMessageA
DrawMenuBar
DrawEdge
CallWindowProcA
cryptui
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
LocalEnroll
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ