Static task
static1
Behavioral task
behavioral1
Sample
06ca47b198d4a5d53aaab8117de2f90c8e2ba35ba652726cd7afce230a2da2c1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
06ca47b198d4a5d53aaab8117de2f90c8e2ba35ba652726cd7afce230a2da2c1.exe
Resource
win10v2004-20220901-en
General
-
Target
06ca47b198d4a5d53aaab8117de2f90c8e2ba35ba652726cd7afce230a2da2c1
-
Size
299KB
-
MD5
58ed98b7f0a2a087dab22de62ee969d4
-
SHA1
20ffba31da2e93481a260006917551cf45d7145e
-
SHA256
06ca47b198d4a5d53aaab8117de2f90c8e2ba35ba652726cd7afce230a2da2c1
-
SHA512
f281dafdbfbd00dbd058685337a9762831246071b6cbe695f31a9bacc819971fd486cf7c2e5126b4e27d3fd1fe9671e3d1e2e891f5045c151bbf2919ed57d9a0
-
SSDEEP
6144:c5kRdVyz12z+TH7I1gidZmrseNYHWdkopGP8n3xH2bW9XynTSb2B21Qh+Wi3:c630kz+TH7pasz9dFVH/tyTSbK216+WW
Malware Config
Signatures
Files
-
06ca47b198d4a5d53aaab8117de2f90c8e2ba35ba652726cd7afce230a2da2c1.exe windows x86
57476b6f54e3fc84a6b6f01dd9624e52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
LocalUnlock
HeapCreate
GetTimeFormatW
GetSystemTime
LocalFree
Sleep
lstrlenA
GetModuleHandleA
UnmapViewOfFile
CloseHandle
LoadLibraryExW
CreateFileA
FindVolumeClose
GetComputerNameA
GetCurrentDirectoryW
CreateThread
GetCommandLineW
GetTickCount
ResetEvent
user32
CallWindowProcA
FillRect
DispatchMessageA
DrawMenuBar
GetDC
IsWindow
CheckRadioButton
DrawEdge
CreateWindowExA
GetKeyState
GetDlgItem
GetComboBoxInfo
SetFocus
cryptui
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
WizardFree
hdwwiz.cpl
AddHardwareWizard
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ