Static task
static1
Behavioral task
behavioral1
Sample
7ccd595c5a4a3690e2f1fdb60375e74499c7715cd888804fdf3a9f52549fdba0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ccd595c5a4a3690e2f1fdb60375e74499c7715cd888804fdf3a9f52549fdba0.exe
Resource
win10v2004-20220812-en
General
-
Target
7ccd595c5a4a3690e2f1fdb60375e74499c7715cd888804fdf3a9f52549fdba0
-
Size
210KB
-
MD5
105c57a5526462e8731b2b8568b8a1ac
-
SHA1
55b30b23302cad6bc8d4e7b79f0af5f36275835b
-
SHA256
7ccd595c5a4a3690e2f1fdb60375e74499c7715cd888804fdf3a9f52549fdba0
-
SHA512
f2b803e253f438c6423a28d773ab056c39088247535322b2a2a85b54e2cbb83d6093d6b8aa3c92016744a936ce8ec2efddd0798097eb492594d803184fb65fb0
-
SSDEEP
3072:6jyQiv67IW/cBLJGkuKWVCyRndd1AFxfOFlQ695wmW89MgpfOJx30hMH4:62pCEmcRCnjdWxf2lQ695K8hpK3Z4
Malware Config
Signatures
Files
-
7ccd595c5a4a3690e2f1fdb60375e74499c7715cd888804fdf3a9f52549fdba0.exe windows x86
73b192f695372ffcd1b9c52251b7bdc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
pdh
PdhBindInputDataSourceW
PdhBrowseCountersA
PdhAddCounterW
PdhAddCounterA
PdhAdd009CounterA
PdhBindInputDataSourceA
kernel32
MultiByteToWideChar
LockResource
SetLastError
HeapFree
GetLocalTime
SetUnhandledExceptionFilter
HeapAlloc
GetCurrentProcessId
lstrcmpA
GetModuleHandleW
GetProcessHeap
lstrcpyA
CloseHandle
GetCurrentProcess
WideCharToMultiByte
GetVolumeInformationA
LoadLibraryW
SystemTimeToFileTime
FreeResource
FindResourceA
GetTickCount
GetSystemTimeAsFileTime
GetEnvironmentStringsA
DeviceIoControl
QueryPerformanceCounter
QueryDosDeviceA
CreateFileA
LoadResource
lstrlenA
pautoenr
CertAutoRemove
CertAutoEnrollment
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
user32
wsprintfA
CharNextA
osuninst
GetUninstallImageSize
RemoveUninstallImage
IsUninstallImageValid
ProvideUiAlerts
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ