Static task
static1
Behavioral task
behavioral1
Sample
1909781c0b14e413dbc8d772f722365c498b51051ce5b18b359ca18a01cf0b70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1909781c0b14e413dbc8d772f722365c498b51051ce5b18b359ca18a01cf0b70.exe
Resource
win10v2004-20220812-en
General
-
Target
1909781c0b14e413dbc8d772f722365c498b51051ce5b18b359ca18a01cf0b70
-
Size
197KB
-
MD5
36ff5ce7c6117bab3f93a3767662bd50
-
SHA1
2f3afdfc3013b567bf0e6d868f5d2f1920c6b403
-
SHA256
1909781c0b14e413dbc8d772f722365c498b51051ce5b18b359ca18a01cf0b70
-
SHA512
f86fc8e3c7904e5b77d4626c2c7728985ecdbe957a60982e1b34eb7d1b9dc45c674ea4952c0ccdef93d5a6f508132b91fb98d21cc33a881206e8a8a8f61be048
-
SSDEEP
3072:J8yILTQ5m2nOgkUuwJ31AtFOYnPoVAs6Tt3wFZrrF7qS9QLnrmVhvP4FMbyg:J8bynsg3O6AYAHT2JeiVhYlg
Malware Config
Signatures
Files
-
1909781c0b14e413dbc8d772f722365c498b51051ce5b18b359ca18a01cf0b70.exe windows x86
299b223ae63d0bb345bac1aba5a99edc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertSetCertificateContextProperty
CryptDecodeObjectEx
CertSerializeCertificateStoreElement
CryptHashPublicKeyInfo
CryptMsgDuplicate
PFXImportCertStore
CertEnumSystemStore
kernel32
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 846KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ