Static task
static1
Behavioral task
behavioral1
Sample
af99aed088be919dd296d255cc09da5d0feb5250d91adf5e90ff31f200daa187.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af99aed088be919dd296d255cc09da5d0feb5250d91adf5e90ff31f200daa187.exe
Resource
win10v2004-20221111-en
General
-
Target
af99aed088be919dd296d255cc09da5d0feb5250d91adf5e90ff31f200daa187
-
Size
65KB
-
MD5
709c27807972254e65646ffc9503a881
-
SHA1
5c2549305a36cc4bdc62fcf5c2c2d41c6d96edd4
-
SHA256
af99aed088be919dd296d255cc09da5d0feb5250d91adf5e90ff31f200daa187
-
SHA512
89eacd12111c73c8aec2f8594539a3665b7307fb950f2b82acbb224d0b1ddc7d0d03ab44e147e4271d62fcde463a90282ba9f7c6d76ea56e497e226dc6992403
-
SSDEEP
1536:U4PVjvQFZ7Fxqlq+MLMRqyBpIRqysUp/Zcy:U4PVjv2ZFxqMFyBpOsU
Malware Config
Signatures
Files
-
af99aed088be919dd296d255cc09da5d0feb5250d91adf5e90ff31f200daa187.exe windows x86
cd1c754622bc2bfdff3aff04aa214e07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
LoadLibraryExA
GlobalUnlock
FindResourceW
GetProcessHeap
SetLastError
GetModuleHandleA
UnmapViewOfFile
TlsGetValue
GetEnvironmentVariableA
GetStdHandle
GetExitCodeProcess
GlobalFree
CreateFileW
CloseHandle
GetCurrentThreadId
HeapCreate
lstrlenW
ReleaseMutex
lstrcpyA
user32
DrawEdge
CreateMenu
CreateWindowExA
CallWindowProcA
DrawMenuBar
DispatchMessageA
IsWindow
CheckRadioButton
FillRect
GetCaretPos
SetFocus
GetDC
GetDlgItem
rsaenh
CPDecrypt
CPSignHash
CPGenKey
CPHashData
CPDeriveKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrjfovd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE