Static task
static1
Behavioral task
behavioral1
Sample
66edaac0011e406b3858bc12b37770bf6255fb65573d65c88807b6986bfe6729.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66edaac0011e406b3858bc12b37770bf6255fb65573d65c88807b6986bfe6729.exe
Resource
win10v2004-20220812-en
General
-
Target
66edaac0011e406b3858bc12b37770bf6255fb65573d65c88807b6986bfe6729
-
Size
209KB
-
MD5
0b6ed60d50105c76e120598c10f53a50
-
SHA1
0e9d3a91f111e1067a90491914aa63543803056b
-
SHA256
66edaac0011e406b3858bc12b37770bf6255fb65573d65c88807b6986bfe6729
-
SHA512
0832bb6e9057a1bef9a951e54903d6fe65dfc6d63a3dfd336096a358de0b466c25cccb5696335a57a21868b97eb9fe5fbdb5b495ccbfe0b864d655933ea37170
-
SSDEEP
3072:xbPGa0deymoAyg/IHCDYxUWJJAH86pSIkX7NRMOFG9cLFCus8hb5ucOwoEOjU8ph:s/gKRnwH8ASIkX7FmkK8hV4UgYdbBbc
Malware Config
Signatures
Files
-
66edaac0011e406b3858bc12b37770bf6255fb65573d65c88807b6986bfe6729.exe windows x86
a44019f70ce6a4563c786e9cc301fed8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
SetLastError
SetUnhandledExceptionFilter
CloseHandle
LockResource
QueryDosDeviceA
CreateFileA
HeapAlloc
MultiByteToWideChar
GetLocalTime
GetCurrentProcess
GetStartupInfoA
GetVolumeInformationA
QueryPerformanceCounter
LoadLibraryW
SystemTimeToFileTime
GetSystemTimeAsFileTime
HeapFree
FindResourceA
LoadResource
GetProcessHeap
lstrcpyA
DeviceIoControl
lstrcmpA
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
FreeResource
GetTickCount
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
pautoenr
CertAutoRemove
CertAutoEnrollment
user32
CharNextA
wsprintfA
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ