Static task
static1
Behavioral task
behavioral1
Sample
79155cd219058c547a184dd9594293023e121642d63b99616f8ab62393415108.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79155cd219058c547a184dd9594293023e121642d63b99616f8ab62393415108.exe
Resource
win10v2004-20221111-en
General
-
Target
79155cd219058c547a184dd9594293023e121642d63b99616f8ab62393415108
-
Size
297KB
-
MD5
7f2ea298d77dd3b2de4859c6d071f012
-
SHA1
2ba22bd05a6d2172f9001c416b4a2ea05b738f28
-
SHA256
79155cd219058c547a184dd9594293023e121642d63b99616f8ab62393415108
-
SHA512
4433d1c5758557b56e3510da562b8c9cb043a5dbf2499c302a24d71887a93e753b07fbb9b79a352ca00cc45702166e132b05a141f37a5a419a7495e97916ae46
-
SSDEEP
6144:Scbuyf0mR8ng2lyaoZPxNEVKP1tzGxyw1j9DvIBydW3uS:Scb1ZeoZPXZzGxyw1VIUI
Malware Config
Signatures
Files
-
79155cd219058c547a184dd9594293023e121642d63b99616f8ab62393415108.exe windows x86
a90d94a09669e6d2372f233c07752c5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetDiskFreeSpaceA
LocalFree
SetLastError
CreateFileA
GetComputerNameA
GetTickCount
GetSystemTime
SetEvent
LoadLibraryW
SuspendThread
GetExitCodeProcess
GetModuleHandleA
lstrlenA
CreateThread
CloseHandle
FindAtomA
GetDriveTypeW
GetCommandLineW
GetFileAttributesA
advapi32
RegQueryValueA
IsTokenRestricted
RegEnumValueA
FreeSid
GetLengthSid
GetUserNameA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
CloseEventLog
GetFileSecurityA
CreateServiceW
RegCreateKeyExA
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
LocalEnroll
CryptUIDlgCertMgr
WizardFree
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ