Static task
static1
Behavioral task
behavioral1
Sample
c72f1d95b65d36f3fd596a9d4a37a32b3fc339440a5d5d42f9e9af99b75add89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c72f1d95b65d36f3fd596a9d4a37a32b3fc339440a5d5d42f9e9af99b75add89.exe
Resource
win10v2004-20221111-en
General
-
Target
c72f1d95b65d36f3fd596a9d4a37a32b3fc339440a5d5d42f9e9af99b75add89
-
Size
392KB
-
MD5
097859f4f4aa3897bba05649e6d76dbe
-
SHA1
599254fb8a0f9391af1a0d515e81126c66dada63
-
SHA256
c72f1d95b65d36f3fd596a9d4a37a32b3fc339440a5d5d42f9e9af99b75add89
-
SHA512
0cc36bd2a76858ecd34612e5819b795feb438026363249160ab72b67fd48d10c75808c3f24792ac231cbdc0ed2f98ed9f11de70f64593d882e705b3310d8cbab
-
SSDEEP
6144:7cy70g2/ycos8Fk4NfVJ6fH92qsB9eoVnY80fej8TWVmyHi:7tgd/Is8Fkk9J6f8r1Yfej8TwzH
Malware Config
Signatures
Files
-
c72f1d95b65d36f3fd596a9d4a37a32b3fc339440a5d5d42f9e9af99b75add89.exe windows x86
8be6d5fa02c75ece2ef07578cbeb2885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
LocalUnlock
Sleep
SetLastError
SetEvent
CloseHandle
CreateFileA
GetTimeFormatA
GetCommandLineW
LoadLibraryExW
LocalFree
GetComputerNameA
lstrlenA
GetModuleHandleA
UnmapViewOfFile
CreateThread
GetSystemTime
HeapCreate
GetTickCount
GetCurrentDirectoryA
user32
CallWindowProcA
CreateWindowExA
GetKeyState
IsWindow
SetFocus
DrawMenuBar
GetComboBoxInfo
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CheckRadioButton
FillRect
cryptui
CryptUIDlgSelectCA
WizardFree
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
inetcpl.cpl
OpenFontsDialog
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ