Static task
static1
Behavioral task
behavioral1
Sample
3a734ddb5cd0fe89657108a513faa0862ba4169edc37533dfc73c61aa2f7ccb8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a734ddb5cd0fe89657108a513faa0862ba4169edc37533dfc73c61aa2f7ccb8.exe
Resource
win10v2004-20221111-en
General
-
Target
3a734ddb5cd0fe89657108a513faa0862ba4169edc37533dfc73c61aa2f7ccb8
-
Size
84KB
-
MD5
48bdb83d7a86d16afb5b8419fc495e73
-
SHA1
bee51bad0e1fb603d20c2afaeb1646c98a087c73
-
SHA256
3a734ddb5cd0fe89657108a513faa0862ba4169edc37533dfc73c61aa2f7ccb8
-
SHA512
20877770c607b8ede9567cb80dd0aa123d110361d77a065c92591c81f4e9c73fdb024d6a9a6a28c4b1197e790c30736a467c6183b695fc0a7ea105c9f7a35560
-
SSDEEP
384:QwNhDGERHm3a2hAO+WtySAuyqgB9XAdwJ227UEk7:QwNgwHm3Rhh+ixkBd5J227UEk
Malware Config
Signatures
Files
-
3a734ddb5cd0fe89657108a513faa0862ba4169edc37533dfc73c61aa2f7ccb8.exe windows x86
cd5640c413c940a0cea8a2e692513607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAEnumNextCA
CAEnumFirstCA
CADeleteCA
CAEnumCertTypes
CADeleteCertType
kernel32
WriteFile
GetCurrentDirectoryA
CopyFileA
CreateMutexA
WriteProcessMemory
LoadLibraryA
GetDateFormatW
GetFullPathNameA
CreateEventW
GetProcessHeap
QueryDosDeviceA
GetComputerNameA
HeapCreate
SleepEx
InterlockedDecrement
CreateSemaphoreW
FoldStringW
GetAtomNameA
GetCurrentThreadId
CloseHandle
CreateDirectoryA
SetEnvironmentVariableA
GetSystemInfo
GetDiskFreeSpaceA
GetCurrentProcess
GetNumberFormatW
GetPrivateProfileIntA
CreateNamedPipeW
CompareStringA
IsValidLocale
GetTimeFormatA
GetEnvironmentVariableA
FormatMessageA
GetTickCount
user32
CharToOemA
DialogBoxParamW
DrawIcon
LoadCursorA
SetFocus
IsWindow
LoadImageA
wsprintfA
GetMessageA
CreateWindowExW
GetWindowLongA
GetWindowTextA
PeekMessageA
SetCursorPos
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ