Static task
static1
Behavioral task
behavioral1
Sample
e88d08d2d2a472293372b45cca8dd28163daf67ecac08609df6df837585d7f14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e88d08d2d2a472293372b45cca8dd28163daf67ecac08609df6df837585d7f14.exe
Resource
win10v2004-20220812-en
General
-
Target
e88d08d2d2a472293372b45cca8dd28163daf67ecac08609df6df837585d7f14
-
Size
297KB
-
MD5
0e9f273c034f060a43ad011bbdb9cc93
-
SHA1
be677090712825646de1a7681b6d77fe34772687
-
SHA256
e88d08d2d2a472293372b45cca8dd28163daf67ecac08609df6df837585d7f14
-
SHA512
b9d8c8b0e1811d71fe405b4e65faf660cddaf5b639e81d0145b3958306b78debb893fe33b03706415ece2c9a52ee0564362043df6ace88a010abd38fa06164a1
-
SSDEEP
6144:zZrSSYmvdnwSsiufTD7zPNmTdWZvtVZUAYeeqACJ7ifJaRvv:1ehmVCLD7zFmJWZVVZJYedHFiRaRvv
Malware Config
Signatures
Files
-
e88d08d2d2a472293372b45cca8dd28163daf67ecac08609df6df837585d7f14.exe windows x86
b84a6301247ab14f66063e733b0497c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ResetEvent
SetEvent
GetComputerNameA
TlsGetValue
GetTickCount
GetDiskFreeSpaceW
FindAtomA
CreateFileA
GetExitCodeProcess
LoadLibraryW
HeapCreate
GetFileAttributesA
GetCommandLineW
SetLastError
GetModuleHandleA
CreateThread
SuspendThread
GetSystemTime
LocalFree
advapi32
GetLengthSid
RegEnumValueA
RegQueryValueA
CloseEventLog
RegEnumKeyExA
GetFileSecurityA
IsTokenRestricted
CreateServiceW
RegCreateKeyExA
RegCloseKey
GetUserNameW
RegDeleteKeyA
CredFree
cryptui
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ