Static task
static1
Behavioral task
behavioral1
Sample
3c5076dbce1c32eba21aa1e98e91f69578ca09fc24454f664cf3ef88bc46a7bb.exe
Resource
win7-20220812-en
General
-
Target
3c5076dbce1c32eba21aa1e98e91f69578ca09fc24454f664cf3ef88bc46a7bb
-
Size
510KB
-
MD5
eb38c17afef7af0fc0461734b652e255
-
SHA1
0564233e84e087909bed7141daffd168d0808584
-
SHA256
3c5076dbce1c32eba21aa1e98e91f69578ca09fc24454f664cf3ef88bc46a7bb
-
SHA512
e007197f83398fe11916d1cfd9f3b640bc86008f1280cd5418bf6f3aeb376b0bf5f83c4523fbd56a8f233322a7f64d3975ae758fdf583e8e599e7fc6fb26b658
-
SSDEEP
12288:IgsnCK4ksMVQdCw1TQeotYhQfPRYoOLhaUfCfIaij9:Ig5K4ky30ZXRYoSkUfCQ/
Malware Config
Signatures
Files
-
3c5076dbce1c32eba21aa1e98e91f69578ca09fc24454f664cf3ef88bc46a7bb.exe windows x86
91469529842f3e1d0ea09f89e4acf847
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetProcAddress
CreateMutexA
DeviceIoControl
InterlockedDecrement
GetLogicalDrives
CompareStringA
GetVersionExA
SetFileAttributesA
SetVolumeLabelA
GetLocalTime
GetLastError
CloseHandle
lstrcmpiA
GetModuleHandleA
GetShortPathNameA
GetDevicePowerState
GetSystemInfo
GetConsoleTitleA
GetProcessHeap
HeapValidate
GetDiskFreeSpaceA
CreateEventW
FormatMessageA
CreateNamedPipeA
GetComputerNameW
SetCurrentDirectoryA
lstrcmpA
GetCurrentThread
GetFullPathNameA
GetDriveTypeA
GetBinaryTypeA
GetTickCount
PurgeComm
GetEnvironmentVariableA
CopyFileA
ReplaceFileW
GetAtomNameA
lstrcpynA
authz
AuthzAccessCheck
AuthzInitializeContextFromSid
crypt32
CertCloseStore
CertGetNameStringA
CertFindCRLInStore
CertFindAttribute
CertFindExtension
CertOpenStore
CertFindChainInStore
CertCompareCertificate
CertCreateCRLContext
CertSaveStore
CertFreeCRLContext
CryptEnumOIDInfo
CertAddStoreToCollection
user32
DialogBoxParamA
GetWindowTextA
SetCursorPos
wsprintfA
DrawIcon
IsDialogMessageA
LoadImageA
CreateWindowExA
PeekMessageA
IsZoomed
LoadCursorA
cabinet
FCICreate
FCIAddFile
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 455KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ