Static task
static1
Behavioral task
behavioral1
Sample
59a2515cdebdea385915d125c5b2ea9cb4e8c6fa53eee6f0dcdc63e1123bd507.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59a2515cdebdea385915d125c5b2ea9cb4e8c6fa53eee6f0dcdc63e1123bd507.exe
Resource
win10v2004-20220812-en
General
-
Target
59a2515cdebdea385915d125c5b2ea9cb4e8c6fa53eee6f0dcdc63e1123bd507
-
Size
27KB
-
MD5
6c7c7c46067028251475598ba220d25c
-
SHA1
305802abb63ba9f41282ca525a54c30fe29f5b10
-
SHA256
59a2515cdebdea385915d125c5b2ea9cb4e8c6fa53eee6f0dcdc63e1123bd507
-
SHA512
46595126bf961c4b8e41fdbbc4eb55af4f06283da9256a390c14abb518ae13abcc94e06d28ee56fb1cd5e224bd9b76f78b58d4766863bcf7b18b9e3ab0e9bed2
-
SSDEEP
384:WwxDJFbULfSLVneVmVD7YNAP1NZVavw3ACWoqhQa:hHdomVnB/YOP1NZEvWw
Malware Config
Signatures
Files
-
59a2515cdebdea385915d125c5b2ea9cb4e8c6fa53eee6f0dcdc63e1123bd507.exe windows x86
985dd21d203841230bccb09e881584b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetCurrentDirectoryW
LocalFree
HeapCreate
LoadLibraryExW
GetTickCount
LocalUnlock
GetTimeFormatW
GetCommandLineW
GetModuleHandleA
ResetEvent
GetSystemTime
Sleep
SetLastError
FindVolumeClose
lstrlenA
CloseHandle
GetComputerNameA
UnmapViewOfFile
CreateFileA
user32
GetDlgItem
CallWindowProcA
GetComboBoxInfo
IsWindow
DrawEdge
DispatchMessageA
SetFocus
CheckRadioButton
GetDC
DrawMenuBar
GetKeyState
CreateWindowExA
FillRect
cryptui
WizardFree
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
LocalEnroll
hdwwiz.cpl
AddHardwareWizard
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lkyijkn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE