Static task
static1
Behavioral task
behavioral1
Sample
410221205640c2fd4ee85778dad86aa61580c660710c5520aed12547dc191ae8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
410221205640c2fd4ee85778dad86aa61580c660710c5520aed12547dc191ae8.exe
Resource
win10v2004-20220901-en
General
-
Target
410221205640c2fd4ee85778dad86aa61580c660710c5520aed12547dc191ae8
-
Size
306KB
-
MD5
5528038d83403400a57923e35e86fdb6
-
SHA1
a253472ea06889ecac26ba6887fc0b89a6197c98
-
SHA256
410221205640c2fd4ee85778dad86aa61580c660710c5520aed12547dc191ae8
-
SHA512
b119065b93d347b6011bd013c4e8c15a09ddbb5e31b1e1cb041b7ff682c30a8a82047eb4ea69acc366d9d1627af10b00566a82d18b08df3deb8e451e51cc879f
-
SSDEEP
6144:b2culKKoTuvOYkk+5UYUK7yqwkBs3xWtn8fk4bv0OD0u3JeyX8:m4n2O3b9zBwkBs3xWtnZGx0byX8
Malware Config
Signatures
Files
-
410221205640c2fd4ee85778dad86aa61580c660710c5520aed12547dc191ae8.exe windows x86
7a219b990bb4a60bccca152ab9c9c370
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
FindAtomW
GetSystemTime
SetEvent
LocalFree
CloseHandle
GetDiskFreeSpaceW
GetFileAttributesW
ResetEvent
GetModuleHandleA
GetComputerNameA
GetTickCount
HeapCreate
ReleaseMutex
SetLastError
CreateThread
GetDriveTypeA
GetCommandLineW
lstrcmpW
CreateFileA
user32
GetKeyState
DestroyCaret
SetFocus
DrawStateA
GetComboBoxInfo
CallWindowProcA
DispatchMessageA
GetDlgItem
CloseWindow
GetClassInfoA
FillRect
GetClipCursor
CreateWindowExA
MessageBoxA
cryptdlg
CertTrustCertPolicy
CertTrustFinalPolicy
CertConfigureTrustA
DecodeRecipientID
CertTrustInit
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ