Static task
static1
Behavioral task
behavioral1
Sample
5066ec4d5b4dc6b8c5310a8be5a5b99dd4871e4aa67d6e1b16418722e37860db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5066ec4d5b4dc6b8c5310a8be5a5b99dd4871e4aa67d6e1b16418722e37860db.exe
Resource
win10v2004-20220901-en
General
-
Target
5066ec4d5b4dc6b8c5310a8be5a5b99dd4871e4aa67d6e1b16418722e37860db
-
Size
208KB
-
MD5
5f2f35f93f3bedc54cfdd9b37b2e2420
-
SHA1
5142765ab8a502e1a4a933d7dbf3e740eae8ea5b
-
SHA256
5066ec4d5b4dc6b8c5310a8be5a5b99dd4871e4aa67d6e1b16418722e37860db
-
SHA512
b3a1d5a8f2150bd29ea5e9db30709495a1ba0799aec8eb126aff3c29b5b593e2fe8e4a389ecc80ae70a52653284b7a0a1724716529138b864218c2ec3fc5f0fc
-
SSDEEP
6144:jWY/hTT8ZwWAU2aDaxXBN3XIuHeh+NZ9JmEM:jW8lTkwNU27PNHI2eI9Jm/
Malware Config
Signatures
Files
-
5066ec4d5b4dc6b8c5310a8be5a5b99dd4871e4aa67d6e1b16418722e37860db.exe windows x86
cf1fd983f97a3f145f59ae544aedc6fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
DeviceIoControl
FreeResource
SetLastError
FindResourceA
GetCurrentThreadId
CreateFileA
GetVolumeInformationA
GetSystemTimeAsFileTime
lstrlenA
HeapFree
GetCurrentProcess
SystemTimeToFileTime
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
LoadResource
GetStartupInfoA
LoadLibraryW
HeapAlloc
LockResource
QueryPerformanceCounter
GetCurrentProcessId
GetLocalTime
lstrcmpA
SetUnhandledExceptionFilter
QueryDosDeviceA
lstrcpyA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExW
RegCloseKey
pautoenr
CertAutoRemove
CertAutoEnrollment
user32
wsprintfA
CharNextA
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ