Static task
static1
Behavioral task
behavioral1
Sample
4cf5a9ceda27c1e01e6a3a564bfbef2ea4cd098614b1cb8c8aa1b9e57db03450.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4cf5a9ceda27c1e01e6a3a564bfbef2ea4cd098614b1cb8c8aa1b9e57db03450.exe
Resource
win10v2004-20220901-en
General
-
Target
4cf5a9ceda27c1e01e6a3a564bfbef2ea4cd098614b1cb8c8aa1b9e57db03450
-
Size
199KB
-
MD5
7bfc637c1739f64a0b6c046c7a61a7b0
-
SHA1
8c8f303fec9888915290357a9ddc4a59ef17c558
-
SHA256
4cf5a9ceda27c1e01e6a3a564bfbef2ea4cd098614b1cb8c8aa1b9e57db03450
-
SHA512
5a6e2a76c0df1c6246e8d92c1c2b6771411804b38e420831871c5a4629d4ff5465ad9a7696bbfe0fbdf3c63573550761766d1001c918632e7d0cc4c08714a4ab
-
SSDEEP
6144:2Q9HxlsbsDgouiKFa5Nv02fPjLDOquNWb/vla:zTMsW69ZP/aqf/vA
Malware Config
Signatures
Files
-
4cf5a9ceda27c1e01e6a3a564bfbef2ea4cd098614b1cb8c8aa1b9e57db03450.exe windows x86
44ee262583a2e03b9ccd0be78ac8cf9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAGetCertTypeProperty
CAGetCertTypeExtensions
CAUpdateCertType
CASetCertTypeKeySpec
CARemoveCACertificateType
CASetCertTypeExtension
CAFindByName
CAFreeCertTypeProperty
CASetCertTypeProperty
CACertTypeSetSecurity
CAGetCertTypeKeySpec
CAGetCertTypeFlags
CACreateCertType
CAGetCAProperty
CAFreeCertTypeExtensions
CAAddCACertificateType
CAEnumCertTypesForCA
CAGetCertTypePropertyEx
CACloseCA
CASetCertTypeFlags
CAUpdateCA
CAFindCertTypeByName
CACertTypeGetSecurity
CACloseCertType
CAFreeCAProperty
CAEnumNextCertType
CAEnumCertTypes
user32
SendMessageW
DialogBoxParamW
GetDlgItemTextA
SetFocus
wsprintfW
MessageBoxW
InsertMenuItemW
EnableWindow
LoadCursorW
ReleaseDC
EndDialog
SystemParametersInfoW
SendDlgItemMessageW
GetWindowLongW
LoadStringW
LoadIconW
SetDlgItemTextW
LoadBitmapW
SetWindowTextW
SetWindowLongW
GetParent
WinHelpW
GetDC
RegisterClipboardFormatW
SetCursor
GetDlgItem
PostMessageW
LoadImageW
kernel32
GlobalLock
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
LocalReAlloc
SetUnhandledExceptionFilter
WideCharToMultiByte
InterlockedDecrement
LocalFree
GetSystemWindowsDirectoryW
IsBadReadPtr
InterlockedIncrement
GetACP
GetModuleFileNameW
GetTickCount
lstrcpyW
GetDateFormatW
GetSystemTimeAsFileTime
FormatMessageW
OutputDebugStringW
QueryPerformanceCounter
GetComputerNameW
GetLastError
SetLastError
InitializeCriticalSection
CreateFileW
RemoveDirectoryA
lstrcmpiW
lstrlenW
GetEnvironmentStringsW
GlobalFree
GlobalUnlock
GlobalAlloc
CloseHandle
OutputDebugStringA
GetStartupInfoA
GetSystemDefaultLangID
msvcrt
wcscat
wcsrchr
memmove
wcscmp
?terminate@@YAXXZ
_except_handler3
wcscpy
wcsstr
??1type_info@@UAE@XZ
_initterm
_purecall
_wcsicmp
wcschr
_wcsupr
wcslen
_onexit
__RTDynamicCast
_adjust_fdiv
vswprintf
free
malloc
wcstoul
??3@YAXPAX@Z
__dllonexit
mbstowcs
??2@YAPAXI@Z
advapi32
RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ