Static task
static1
Behavioral task
behavioral1
Sample
d58fad4f229106f74d20aeaca981c1fe585292f3b86f370bbe0b59b208807622.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d58fad4f229106f74d20aeaca981c1fe585292f3b86f370bbe0b59b208807622.exe
Resource
win10v2004-20221111-en
General
-
Target
d58fad4f229106f74d20aeaca981c1fe585292f3b86f370bbe0b59b208807622
-
Size
58KB
-
MD5
70834e7d181863f10cc616029a9fa116
-
SHA1
1d469fedbd1414a10fcbf30a9f23f44d48c1bbea
-
SHA256
d58fad4f229106f74d20aeaca981c1fe585292f3b86f370bbe0b59b208807622
-
SHA512
e4d3894b1dbb020cc061e80e2ddafe82a92df42f0d1b90823f3344ab8221f46827eca332a7526f0dde3e1a7260a4e7ddc930e44c2118fe0d8ac5f42229f46f07
-
SSDEEP
768:hw823ZiUzAr4rS6heyY1soCG4IXXLrXhYGJYStd+0m1UmMsPOq:S82pi4uSS6MyYuoqIXXLrXzuef9j
Malware Config
Signatures
Files
-
d58fad4f229106f74d20aeaca981c1fe585292f3b86f370bbe0b59b208807622.exe windows x86
ea9083d6daf4a96a9f4175e7977aa0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateMutexA
CloseHandle
TlsGetValue
GetStdHandle
GetModuleHandleA
SetLastError
LoadLibraryExA
GetProcessHeap
lstrcpyA
GetEnvironmentVariableA
CreateFileW
lstrlenW
HeapCreate
GlobalUnlock
ReleaseMutex
GlobalFree
GetCurrentThreadId
GetExitCodeProcess
UnmapViewOfFile
user32
CallWindowProcA
GetCaretPos
CreateWindowExA
GetDlgItem
CheckRadioButton
IsWindow
GetDC
FillRect
CreateMenu
DrawEdge
SetFocus
DispatchMessageA
DrawMenuBar
rsaenh
CPDecrypt
CPDeriveKey
CPGenKey
CPHashData
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE