Static task
static1
Behavioral task
behavioral1
Sample
a26133b1b9e4ea86cdd7daea989601d738bc2d98d1d4c61416ea27389dbfb7dd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a26133b1b9e4ea86cdd7daea989601d738bc2d98d1d4c61416ea27389dbfb7dd.exe
Resource
win10v2004-20221111-en
General
-
Target
a26133b1b9e4ea86cdd7daea989601d738bc2d98d1d4c61416ea27389dbfb7dd
-
Size
41KB
-
MD5
ac5377b0276df0f998705d6df3a88893
-
SHA1
a088349cd32d88feb367182f04a4f0b20fa09d66
-
SHA256
a26133b1b9e4ea86cdd7daea989601d738bc2d98d1d4c61416ea27389dbfb7dd
-
SHA512
31ca659a369016968e139dfea4a369f7fb2d75c1981d94b63065ceedbbbc4ec4c7c718d11ba9ad34c6c5463c18289f7f8ddcbda710480b9046dfc32bb6461552
-
SSDEEP
96:6P0C054Bpk575xZClcYEOq6G+KWbMbzttoK7Oaq1a/1cie+AZqqrYDb6zUNaD205:6MDbfXkcqKNIK7Y1a/zeB+D+z8z8Z7
Malware Config
Signatures
Files
-
a26133b1b9e4ea86cdd7daea989601d738bc2d98d1d4c61416ea27389dbfb7dd.exe windows x86
feae2e588af7d29b585e3305d8da9601
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
Sleep
GlobalUnlock
GetCommandLineW
lstrlenA
LoadLibraryW
GetCurrentDirectoryA
lstrcpyA
LocalFree
CloseHandle
FindClose
UnmapViewOfFile
GetSystemTime
GetComputerNameA
ResetEvent
GetModuleHandleA
CreateThread
PulseEvent
GetCurrentProcessId
CreateFileW
user32
DispatchMessageA
CheckRadioButton
DrawMenuBar
SetFocus
GetDC
GetCaretPos
CreateWindowExA
IsWindow
CallWindowProcA
FillRect
CreateIcon
DrawEdge
GetDlgItem
cryptui
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE