Static task
static1
Behavioral task
behavioral1
Sample
79ee2f0c5e6425146c043f05bb5deb8bbe2f606543a3b57b25a0220b85000aa8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79ee2f0c5e6425146c043f05bb5deb8bbe2f606543a3b57b25a0220b85000aa8.exe
Resource
win10v2004-20221111-en
General
-
Target
79ee2f0c5e6425146c043f05bb5deb8bbe2f606543a3b57b25a0220b85000aa8
-
Size
65KB
-
MD5
a2765c286facdaa5f63af98b89843e36
-
SHA1
1f54ece5eab7537173be48f6055e1abb480b2a7d
-
SHA256
79ee2f0c5e6425146c043f05bb5deb8bbe2f606543a3b57b25a0220b85000aa8
-
SHA512
c12a39aa7a822fa3e3136eb3e0b900d044e6d8ed7e035d36fa902d1a04d7a439a84dab07ea8c03961b8b92347295e98a93d0226ccea70e49f37351d5cdb47c33
-
SSDEEP
1536:l4PVjvQFZ7Fxqlq+MLMRqyBpIRqysUp/Zcy:l4PVjv2ZFxqMFyBpOsU
Malware Config
Signatures
Files
-
79ee2f0c5e6425146c043f05bb5deb8bbe2f606543a3b57b25a0220b85000aa8.exe windows x86
cd1c754622bc2bfdff3aff04aa214e07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
LoadLibraryExA
GlobalUnlock
FindResourceW
GetProcessHeap
SetLastError
GetModuleHandleA
UnmapViewOfFile
TlsGetValue
GetEnvironmentVariableA
GetStdHandle
GetExitCodeProcess
GlobalFree
CreateFileW
CloseHandle
GetCurrentThreadId
HeapCreate
lstrlenW
ReleaseMutex
lstrcpyA
user32
DrawEdge
CreateMenu
CreateWindowExA
CallWindowProcA
DrawMenuBar
DispatchMessageA
IsWindow
CheckRadioButton
FillRect
GetCaretPos
SetFocus
GetDC
GetDlgItem
rsaenh
CPDecrypt
CPSignHash
CPGenKey
CPHashData
CPDeriveKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yacsnca Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE