Static task
static1
Behavioral task
behavioral1
Sample
86c03ca6c213986c1d65713e8b2aa59eca9e3e5b0e2ddc557028accbf25d234f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86c03ca6c213986c1d65713e8b2aa59eca9e3e5b0e2ddc557028accbf25d234f.exe
Resource
win10v2004-20221111-en
General
-
Target
86c03ca6c213986c1d65713e8b2aa59eca9e3e5b0e2ddc557028accbf25d234f
-
Size
296KB
-
MD5
479fe25315455e88e58a1c63e96285e8
-
SHA1
cd1d44b04880fa43e17117beeaf05bf920ed4451
-
SHA256
86c03ca6c213986c1d65713e8b2aa59eca9e3e5b0e2ddc557028accbf25d234f
-
SHA512
6c538698714c6f75fab8e200cd2a985489253152d6974189c866c9746c9f3cabcffa05008efe5d376ce70646fa8e4492275e7f524b7c0a6fb600e5d8742c3cfe
-
SSDEEP
6144:598w0v8LN7pAfQqlrnctUVZHyvbP3B6HsIZ7K:r8wNJlAfDncRjvBl8O
Malware Config
Signatures
Files
-
86c03ca6c213986c1d65713e8b2aa59eca9e3e5b0e2ddc557028accbf25d234f.exe windows x86
f2822990005fbc17bc13fff91297f6b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SetWindowTextA
GetIconInfo
GetWindowRect
DialogBoxIndirectParamA
CreatePopupMenu
GetSysColorBrush
DispatchMessageA
GetForegroundWindow
CreateDialogIndirectParamA
GetDesktopWindow
GetClientRect
SetClipboardData
DestroyWindow
SendMessageA
SendDlgItemMessageA
CheckRadioButton
SetForegroundWindow
BeginDeferWindowPos
DeferWindowPos
CreateMenu
UnregisterHotKey
GetPropA
TranslateMessage
RegisterWindowMessageA
crypt32
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertCreateCertificateContext
CryptDecodeObject
CertFreeCertificateContext
CertOpenStore
CertAddCertificateContextToStore
CryptImportPublicKeyInfo
CryptEncodeObject
CryptAcquireCertificatePrivateKey
CertFreeCertificateChain
secur32
InitializeSecurityContextA
AcceptSecurityContext
FreeContextBuffer
kernel32
GetTimeZoneInformation
GetSystemInfo
VirtualQuery
InterlockedExchange
InitializeCriticalSection
LoadLibraryA
GetOEMCP
QueryPerformanceCounter
RtlUnwind
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
TlsGetValue
GetTimeFormatA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
ExpandEnvironmentStringsA
GetProfileStringA
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE