Static task
static1
Behavioral task
behavioral1
Sample
a76dbd45fa3ddf81318135cb62b236506de26ab9bb3cbe33cf9654e3cc97e9ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a76dbd45fa3ddf81318135cb62b236506de26ab9bb3cbe33cf9654e3cc97e9ec.exe
Resource
win10v2004-20220812-en
General
-
Target
a76dbd45fa3ddf81318135cb62b236506de26ab9bb3cbe33cf9654e3cc97e9ec
-
Size
202KB
-
MD5
5cc6eb184a229f42b3d60658b8329da0
-
SHA1
a0a69eea739a1b1d42c8f750a87d9a87cd79f1b2
-
SHA256
a76dbd45fa3ddf81318135cb62b236506de26ab9bb3cbe33cf9654e3cc97e9ec
-
SHA512
101dd4af2efc9926215d97803280d69724756bd9ae083f6d9139050664fb0d6e840bde881612ce8a85cb687f6c688a16a69489fdc47d4b0f76ebea40e158d0c3
-
SSDEEP
6144:VwqIlHsTjlWg74vx/E9yF5tXpgStrJ8vEU:VisnlB4vf5tXpgStrSvEU
Malware Config
Signatures
Files
-
a76dbd45fa3ddf81318135cb62b236506de26ab9bb3cbe33cf9654e3cc97e9ec.exe windows x86
c4d4b4b0a79e0ec5bdff40ebc900c126
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
QueryPerformanceCounter
GetFileTime
FormatMessageW
RaiseException
GlobalFix
SetCurrentDirectoryW
GetACP
user32
FindWindowW
GetWindowRect
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW
crypt32
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore
shell32
SHGetFolderPathW
ole32
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket
gdi32
DeleteObject
SelectObject
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetObjectW
odbc32
SQLFreeStmt
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ