Static task
static1
Behavioral task
behavioral1
Sample
53daa42a680bb722ac87142cd9bfa180f5ab9f37e1036ea3b123e15106436581.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53daa42a680bb722ac87142cd9bfa180f5ab9f37e1036ea3b123e15106436581.exe
Resource
win10v2004-20220901-en
General
-
Target
53daa42a680bb722ac87142cd9bfa180f5ab9f37e1036ea3b123e15106436581
-
Size
209KB
-
MD5
6b449aef97c1fbccf3276a85ca5e5140
-
SHA1
90afebfcc89d584f6712d60c6cc7d40a16098626
-
SHA256
53daa42a680bb722ac87142cd9bfa180f5ab9f37e1036ea3b123e15106436581
-
SHA512
5061bf6d0b260bf6fd779def9a77e895db9def83847ef6bd0c056703cfaaadb0ede9676098f8f7a64a5899bcfe8030fbb340a6cfc34bcb1f918b6f165d641fed
-
SSDEEP
6144:6Ql2/M3ewHOOOyeDWrbaJN9+j8JG+oI45rAsNK:6QwM3fbFeir4Kj8JR749u
Malware Config
Signatures
Files
-
53daa42a680bb722ac87142cd9bfa180f5ab9f37e1036ea3b123e15106436581.exe windows x86
8c1efaa2eed16578dbd7c2ef6d1fa4f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
schannel
QuerySecurityPackageInfoA
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
InitializeSecurityContextW
kernel32
GetLocaleInfoA
FindResourceA
CreateFileA
lstrlenA
GetProcessHeap
GetCurrentProcessId
SetLastError
HeapAlloc
GetCurrentProcess
MultiByteToWideChar
QueryPerformanceCounter
GetOEMCP
HeapFree
CloseHandle
GetTickCount
LoadLibraryW
GetSystemTimeAsFileTime
SystemTimeToFileTime
WideCharToMultiByte
lstrcmpA
SetUnhandledExceptionFilter
GetLocalTime
lstrcpyA
scecli
SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceAppendSecurityProfileInfo
SceBrowseDatabaseTable
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 3KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ