Static task
static1
Behavioral task
behavioral1
Sample
736afcac636380aa131e2a933b73e35bb4fb99de82582c8b95558e72927226d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
736afcac636380aa131e2a933b73e35bb4fb99de82582c8b95558e72927226d7.exe
Resource
win10v2004-20220901-en
General
-
Target
736afcac636380aa131e2a933b73e35bb4fb99de82582c8b95558e72927226d7
-
Size
817KB
-
MD5
5acdd98e1835bba457a8dbf42bc5cb56
-
SHA1
165916bb4cd3354243407d483f3f59648ff5eb6b
-
SHA256
736afcac636380aa131e2a933b73e35bb4fb99de82582c8b95558e72927226d7
-
SHA512
5ff63b61ba8db173624b0ecdee091794d3b41d8fd1ed04de7a076f8c922c6c3f16e53b472a58f6feee40054878a4858d3b25cde491e32fd3993bf3c792721a2d
-
SSDEEP
24576:z3df5T2H3k/I4tPQYCJ54gnwKLgI6kBbqg3Xu:zXT2Xk/pFemKLskBbq4e
Malware Config
Signatures
Files
-
736afcac636380aa131e2a933b73e35bb4fb99de82582c8b95558e72927226d7.exe windows x86
a2e4bbc84a71c9cf8babd81384043a85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
LeaveCriticalSection
lstrcatA
FormatMessageW
VirtualAlloc
RemoveDirectoryA
GetFullPathNameW
FindNextVolumeA
GetDiskFreeSpaceW
GetTimeFormatA
SetCurrentDirectoryA
GetLocalTime
GetModuleHandleA
Heap32First
GetPrivateProfileIntW
GetFileTime
InterlockedExchange
GetCurrentProcess
GetStringTypeA
certcli
CAEnumNextCA
CAEnumFirstCA
CADeleteCertType
CADeleteCA
Sections
.code Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.IDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDATA Size: 805KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ