Static task
static1
Behavioral task
behavioral1
Sample
ceb726cbdfaed9820ecd03f92bf450aac50a7decc410bd1528c3dc796fb64477.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ceb726cbdfaed9820ecd03f92bf450aac50a7decc410bd1528c3dc796fb64477.exe
Resource
win10v2004-20220812-en
General
-
Target
ceb726cbdfaed9820ecd03f92bf450aac50a7decc410bd1528c3dc796fb64477
-
Size
54KB
-
MD5
47a41a5b9f861d7aacc6615621b9e91e
-
SHA1
5773e7b6ff1bbcb39540f3a1fbab170785063733
-
SHA256
ceb726cbdfaed9820ecd03f92bf450aac50a7decc410bd1528c3dc796fb64477
-
SHA512
dbbd414fd57651b9ac2d8fd124a7edfbbd4b554877ba9a44a1c356a4482535f8ee4d5bc73a88281db1ad0069be23d58c0beca007e6bd4e6edcf3849f2824e2fe
-
SSDEEP
1536:R13I78TxVgKb2nsAX1MXWLb+Qlzyicqwyy:P1Z2sAFMXC3z7cqVy
Malware Config
Signatures
Files
-
ceb726cbdfaed9820ecd03f92bf450aac50a7decc410bd1528c3dc796fb64477.exe windows x86
7bd4e245dd46a19e4b2e18763011367d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mssign32
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllRegisterServer
DllRegisterServer
kernel32
VirtualAlloc
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
odbc32
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
Sections
.text Size: 512B - Virtual size: 433B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE