Static task
static1
Behavioral task
behavioral1
Sample
Brigitte Hagling 5 Mai 2014 Plattform GmbH Video.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Brigitte Hagling 5 Mai 2014 Plattform GmbH Video.exe
Resource
win10v2004-20220812-en
General
-
Target
9d82f0241ee47ef07caf60ac97a15f8d6d1c12a61146c378dd74f4731dc58e09
-
Size
43KB
-
MD5
96b054c8afdfd67c8388866f118dba15
-
SHA1
554d0e388f4f52c4fd857374e2e7afad94b3691a
-
SHA256
9d82f0241ee47ef07caf60ac97a15f8d6d1c12a61146c378dd74f4731dc58e09
-
SHA512
20851eb5634441196af53aa7c8e5c3f7d58778f10ab7a7e16be5dbd3c907532d05cebe3b3800ec77143d8bf1ec7118fe97e504769d39f8a4c0c276ae72a253b0
-
SSDEEP
768:Th00WPzM3RpqS+qfRVtofMJO9C57A+/tIIQS+4I8Am:T/WLAN+qJVOro1Q3r8Am
Malware Config
Signatures
Files
-
9d82f0241ee47ef07caf60ac97a15f8d6d1c12a61146c378dd74f4731dc58e09.zip
-
Brigitte Hagling 5 Mai 2014 Plattform GmbH Video.com.exe windows x86
5aa2fe8377c062c653f29d6f3f41071f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryW
CreateFileW
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetComputerNameW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTickCount
GetVersionExA
GetVolumeInformationW
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchangeAdd
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryDosDeviceW
QueryPerformanceCounter
ReadConsoleA
RemoveDirectoryW
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenA
lstrlenW
user32
CreateWindowExA
DispatchMessageA
GetMessageA
RegisterClassA
TranslateMessage
crypt32
CertStrToNameW
CertCreateSelfSignCertificate
CertFreeCertificateContext
CryptEncodeObject
PFXExportCertStoreEx
CertFindCertificateInStore
CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertAddCertificateContextToStore
advapi32
CryptAcquireContextW
CryptDestroyKey
CryptGenKey
CryptGetUserKey
CryptReleaseContext
DecryptFileW
EncryptFileW
GetUserNameW
RegCloseKey
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
shell32
CommandLineToArgvW
rpcrt4
UuidToStringW
UuidCreate
RpcStringFreeW
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 892B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ