Static task
static1
Behavioral task
behavioral1
Sample
59e508c0984cd605d967a19ede4bb3d00b3a21a074fe3dbb76f2f69ed57a39b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
59e508c0984cd605d967a19ede4bb3d00b3a21a074fe3dbb76f2f69ed57a39b8.exe
Resource
win10v2004-20221111-en
General
-
Target
59e508c0984cd605d967a19ede4bb3d00b3a21a074fe3dbb76f2f69ed57a39b8
-
Size
93KB
-
MD5
c9d5b99c846e49a9e40be0d4e332d2e0
-
SHA1
ea1e228d930b9970cbd8bacd902a7d10e921edd3
-
SHA256
59e508c0984cd605d967a19ede4bb3d00b3a21a074fe3dbb76f2f69ed57a39b8
-
SHA512
eb628c5190e8da39e448e41a5a05d7f6022729d0cd0027c15d46b593ab54f404935838a0b1b2ba21b33b00466ffe8a129b943fa1f638f894eaf72cdfdd137c7f
-
SSDEEP
1536:b/I4SEoZ0uQdTc7OqErar+sbbbbbbbgeN5HZNSsR2oGi7:jXboZ0uqiOqErarV55qoGi7
Malware Config
Signatures
Files
-
59e508c0984cd605d967a19ede4bb3d00b3a21a074fe3dbb76f2f69ed57a39b8.exe windows x86
7b374fbbc30f64eae2c88e5699283a53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
FindResourceW
GetModuleHandleA
lstrlenA
CreateFileW
GetCurrentDirectoryA
CloseHandle
SetLastError
CreateProcessA
LocalFree
HeapCreate
Sleep
lstrcpyA
PulseEvent
UnmapViewOfFile
LoadLibraryW
GetCurrentThreadId
GlobalUnlock
FindClose
user32
CallWindowProcA
SetFocus
DrawEdge
GetDlgItem
DrawMenuBar
FillRect
CreateWindowExA
GetDC
CreateIcon
GetCaretPos
CheckRadioButton
IsWindow
DispatchMessageA
cryptui
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgSelectCA
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ