Static task
static1
Behavioral task
behavioral1
Sample
e7ff2acba22941196ab5c75772ad59bdaf8e591d01dfb63c0b6f4f3103751918.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7ff2acba22941196ab5c75772ad59bdaf8e591d01dfb63c0b6f4f3103751918.exe
Resource
win10v2004-20220812-en
General
-
Target
e7ff2acba22941196ab5c75772ad59bdaf8e591d01dfb63c0b6f4f3103751918
-
Size
409KB
-
MD5
21551a185c65b412e2ffa3b342d9c4a0
-
SHA1
a9e8e88db94bd7ade260cf4ec48119db6e100bae
-
SHA256
e7ff2acba22941196ab5c75772ad59bdaf8e591d01dfb63c0b6f4f3103751918
-
SHA512
5d2cc63bfc5274dacea6b225d9a820c2f08d239c83c822f9b69ff3993a33c8485d4dc1ec1e2a8556b569d8a0ac944747aa0551caba309e0f4c40c8c4167abd91
-
SSDEEP
6144:OZglRMjIf2na5vnYg2QL5izvc4W0aUQexn1so2MBA+4OVIuI8O5wr0nyC+Ly9t/4:mUAa5/zL5QRaUnF1dHBT4VwAnHBCT
Malware Config
Signatures
Files
-
e7ff2acba22941196ab5c75772ad59bdaf8e591d01dfb63c0b6f4f3103751918.exe windows x86
145f5ac1f9ec7aaa1374fa5a5de5ec27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowInfo
wsprintfW
IsDlgButtonChecked
CheckDlgButton
EnumWindowStationsW
EnableWindow
wintrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
kernel32
GetAtomNameA
GetCurrentThreadId
ExitProcess
AddLocalAlternateComputerNameA
SetEvent
CreateEventA
FileTimeToSystemTime
CreateDirectoryW
SetFileAttributesW
GetThreadContext
LocalFree
FileTimeToLocalFileTime
ResetEvent
GetFileAttributesW
TerminateProcess
CreateThread
MoveFileExW
CreateProcessW
LocalAlloc
WaitForSingleObject
CopyFileW
GetSystemDirectoryW
GetSystemTime
GetCommandLineA
CreateFileW
LoadLibraryExW
GetModuleHandleW
Sections
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ