Static task
static1
Behavioral task
behavioral1
Sample
d224611148152d1289d096fbcbfa90833cf59a8d231d01e44d8d2a04f233b172.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d224611148152d1289d096fbcbfa90833cf59a8d231d01e44d8d2a04f233b172.exe
Resource
win10v2004-20221111-en
General
-
Target
d224611148152d1289d096fbcbfa90833cf59a8d231d01e44d8d2a04f233b172
-
Size
334KB
-
MD5
fcc343c9e4c57dc487b2f8de9eef334d
-
SHA1
36175bf499e997c979dfb75ef776346f68881692
-
SHA256
d224611148152d1289d096fbcbfa90833cf59a8d231d01e44d8d2a04f233b172
-
SHA512
91570b2e020379e8a99cbfc234452323a666ee00becddd6b689fdf305c182d247fd21c03c7fb2440e0d971bd6cf365c582a28d3776a6bd67c32dee27b36ca2ec
-
SSDEEP
6144:hH5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGat:hQPVCI0rIoUpP/5rKFrV3aHGu1a/ES
Malware Config
Signatures
Files
-
d224611148152d1289d096fbcbfa90833cf59a8d231d01e44d8d2a04f233b172.exe windows x86
70e962e6a551b69372169643c6a09dcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetSystemTime
LocalFree
GetCommandLineW
GetTickCount
GetComputerNameA
CreateThread
LoadLibraryW
SetLastError
lstrcmpiW
ResetEvent
CreateFileA
HeapCreate
GetModuleHandleA
GetDiskFreeSpaceW
ResumeThread
FindAtomW
CloseHandle
SetEvent
GetFileAttributesW
user32
DispatchMessageA
DrawStateA
CallWindowProcA
GetDlgItem
GetKeyState
GetClassInfoA
CloseWindow
FillRect
DestroyCaret
CreateWindowExA
GetComboBoxInfo
SetFocus
GetClipCursor
MessageBoxA
cryptdlg
CertTrustCertPolicy
CertTrustInit
CertTrustFinalPolicy
CertConfigureTrustA
DecodeRecipientID
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ