Static task
static1
Behavioral task
behavioral1
Sample
fca4c3b287b4d368f61f67ededfa0ff9bc1161c48788e8e84d33fe96cf3ebff5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fca4c3b287b4d368f61f67ededfa0ff9bc1161c48788e8e84d33fe96cf3ebff5.exe
Resource
win10v2004-20220812-en
General
-
Target
fca4c3b287b4d368f61f67ededfa0ff9bc1161c48788e8e84d33fe96cf3ebff5
-
Size
170KB
-
MD5
500b64f3dd8333e68b96a7d828f43cfb
-
SHA1
58f590346a6cd5f77289fbdc330eebe522250c18
-
SHA256
fca4c3b287b4d368f61f67ededfa0ff9bc1161c48788e8e84d33fe96cf3ebff5
-
SHA512
741788633dd06e8577b322e2d70af37cee1b14ecfb3c1ccdb13f8fe3cbb3bce34fa586cd09704d422d100e841f401fb03e0d013a84205451c63a116332267e2e
-
SSDEEP
3072:dt1fvMe5jjXVuh0BIifW531K8ju3c3qERubQSzUJUT+T2UkGtx1iUr42A:d/vMI8duW531K8ba0SCJLtx1
Malware Config
Signatures
Files
-
fca4c3b287b4d368f61f67ededfa0ff9bc1161c48788e8e84d33fe96cf3ebff5.exe windows x86
ca5e386da02b7fa06e5ab211ab42ffd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualAlloc
ole32
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
ReleaseStgMedium
CoGetCallContext
StringFromCLSID
CoGetInterfaceAndReleaseStream
CoTaskMemFree
CoTaskMemAlloc
shlwapi
PathIsUNCServerShareW
PathAppendW
shell32
SHGetFolderPathW
version
GetFileVersionInfoW
crypt32
CertControlStore
CertDeleteCertificateFromStore
CertDuplicateStore
CertGetCertificateContextProperty
CertGetNameStringW
CertEnumSystemStore
CertOpenStore
CertDuplicateCertificateContext
CryptFindOIDInfo
CertAddCertificateContextToStore
CertGetEnhancedKeyUsage
CryptQueryObject
CertFreeCertificateContext
CertEnumCertificatesInStore
CryptDecodeObject
CertFindCertificateInStore
CertSaveStore
CertCloseStore
dnsapi
DnsNameCompareEx_W
gdi32
SetBkColor
GetDeviceCaps
CreateFontIndirectW
SetTextColor
CreateBitmap
GetTextExtentPoint32W
CreatePatternBrush
DeleteObject
apphelp
SetPermLayers
dsprop
ADsPropShowErrorDialog
ADsPropSetHwndWithTitle
ADsPropCreateNotifyObj
FindSheet
ADsPropSendErrorMessage
ADsPropGetInitInfo
ADsPropSetHwnd
ntdll
RtlNtStatusToDosError
RtlSubAuthoritySid
RtlInitUnicodeString
NtQuerySystemTime
RtlSubAuthorityCountSid
RtlIdentifierAuthoritySid
credui
CredUIParseUserNameW
CredUIInitControls
cryptui
CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateW
Sections
.text Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ