Static task
static1
Behavioral task
behavioral1
Sample
76baa42a237dd522949589e897ffca9ab1b657faeb72287cf915a2fa6516deef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76baa42a237dd522949589e897ffca9ab1b657faeb72287cf915a2fa6516deef.exe
Resource
win10v2004-20220812-en
General
-
Target
76baa42a237dd522949589e897ffca9ab1b657faeb72287cf915a2fa6516deef
-
Size
66KB
-
MD5
cff9143800d6614ae56c0e83bd891d2a
-
SHA1
34fb60c842068e5fadf149e5b13f8c372cce3800
-
SHA256
76baa42a237dd522949589e897ffca9ab1b657faeb72287cf915a2fa6516deef
-
SHA512
0338ac84ddc0d90e434f3b36ad315846b28222717a1a6514c9bd75f4a41fe81e168c4f6af0d703a545d6405b421bc14cc80bc89d5d8e4bd7c1856c5a9e9426cb
-
SSDEEP
1536:d5z9/DHo4cneZtZS5A7+xNpTB1FmIz7NCGJoO:dZ9/DI4AytZS5AcNpFF
Malware Config
Signatures
Files
-
76baa42a237dd522949589e897ffca9ab1b657faeb72287cf915a2fa6516deef.exe windows x86
2f4f86f2ee5a5b7a1ef808d46deb15da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
InterlockedExchange
FindResourceA
MoveFileA
GetConsoleAliasA
CreateMailslotA
FileTimeToLocalFileTime
GetProcessHeap
GetCurrentDirectoryA
VirtualQuery
SetCurrentDirectoryA
HeapCreate
FoldStringA
IsBadStringPtrA
EncodeSystemPointer
lstrcpynA
GetEnvironmentVariableA
GetFullPathNameA
GetModuleFileNameA
QueryDosDeviceA
CopyFileA
GetBinaryTypeA
GetModuleHandleA
IsBadCodePtr
GetPrivateProfileSectionA
OpenMutexA
IsBadWritePtr
GetCPInfo
msctf
TF_CreateLangBarMgr
TF_CreateThreadMgr
TF_UninitSystem
TF_InitSystem
TF_GetInputScope
dsprop
ErrMsg
ReportError
crypt32
CertCreateContext
CertGetNameStringA
CertSaveStore
CertFindExtension
CertOpenStore
CertFindAttribute
CertFindChainInStore
CertFindCRLInStore
CryptEnumOIDInfo
CertCreateCRLContext
CertDuplicateCRLContext
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ