Static task
static1
Behavioral task
behavioral1
Sample
842cda0827b9b008f343dd3fb918803aea1fc498e643e987df2243a9b9d9c179.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
842cda0827b9b008f343dd3fb918803aea1fc498e643e987df2243a9b9d9c179.exe
Resource
win10v2004-20220812-en
General
-
Target
842cda0827b9b008f343dd3fb918803aea1fc498e643e987df2243a9b9d9c179
-
Size
355KB
-
MD5
dc2b2b4403d16474e2d9ec367cee18ce
-
SHA1
292dfbfcd1fd0f1f723249b66bcc7ab2b3499ba3
-
SHA256
842cda0827b9b008f343dd3fb918803aea1fc498e643e987df2243a9b9d9c179
-
SHA512
7a6dcb1275c4ff30c3db1e6cd9a27465fba1a1a3c378fb154880eb0c1f7f3655f071bb46e4542e912f5b93b4deb8cb4da439eb7e535f555ea92cc71830abfe76
-
SSDEEP
6144:G84U8DoZ3fsu8isVVRdB4etHsWDZv8jU2JbcfGxcdbL70ktF/wNJRDQ91LC1s7ch:G8eVu8iE/B4etZDZvexeLbwbRcbCC7cO
Malware Config
Signatures
Files
-
842cda0827b9b008f343dd3fb918803aea1fc498e643e987df2243a9b9d9c179.exe windows x86
d73c3cc3a11a6db7c3c619bfc926b5e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetPrivateProfileIntA
CreateFileMappingW
GetLastError
MapViewOfFile
GetTickCount
SetLastError
CloseHandle
GetStdHandle
LoadLibraryW
GetModuleHandleW
GetComputerNameA
GetFileAttributesA
GlobalFree
lstrlenW
FindAtomA
FindClose
TlsGetValue
VirtualAlloc
GetLocalTime
user32
CallWindowProcA
DestroyCaret
CloseWindow
GetCaretPos
CreateWindowExA
FillRect
GetClassInfoA
DrawStateA
GetClientRect
GetDlgItem
GetMenu
DispatchMessageA
EndDialog
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
WizardFree
LocalEnroll
CryptUIDlgCertMgr
dsound
DirectSoundCreate
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ