Static task
static1
Behavioral task
behavioral1
Sample
6c89c57f8b69853b6042d7d57d2e3319143445a7a8c33355ae18ef295dfb53a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c89c57f8b69853b6042d7d57d2e3319143445a7a8c33355ae18ef295dfb53a9.exe
Resource
win10v2004-20220812-en
General
-
Target
6c89c57f8b69853b6042d7d57d2e3319143445a7a8c33355ae18ef295dfb53a9
-
Size
93KB
-
MD5
89e3a41f43bc0b3bf741ffd05d515597
-
SHA1
54c3b52bc23646dbd4eef2291fbe4352b84677a8
-
SHA256
6c89c57f8b69853b6042d7d57d2e3319143445a7a8c33355ae18ef295dfb53a9
-
SHA512
856e185ad61fcd3d5350f763a55e755119e3b57009980eebd81df947cd2eb45a7a8c00fb6d7915687d9884ef23480bdd39e1abb99a7047cfafda688f80bb5413
-
SSDEEP
1536:I/I4SEoZ0uQdTc7OqErar+sbbbbbbbgeN5HZNSsR2oGi7:wXboZ0uqiOqErarV55qoGi7
Malware Config
Signatures
Files
-
6c89c57f8b69853b6042d7d57d2e3319143445a7a8c33355ae18ef295dfb53a9.exe windows x86
7b374fbbc30f64eae2c88e5699283a53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
FindResourceW
GetModuleHandleA
lstrlenA
CreateFileW
GetCurrentDirectoryA
CloseHandle
SetLastError
CreateProcessA
LocalFree
HeapCreate
Sleep
lstrcpyA
PulseEvent
UnmapViewOfFile
LoadLibraryW
GetCurrentThreadId
GlobalUnlock
FindClose
user32
CallWindowProcA
SetFocus
DrawEdge
GetDlgItem
DrawMenuBar
FillRect
CreateWindowExA
GetDC
CreateIcon
GetCaretPos
CheckRadioButton
IsWindow
DispatchMessageA
cryptui
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgSelectCA
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfqokwn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE