Static task
static1
Behavioral task
behavioral1
Sample
d226820239886c3df7fc248013389e7f6e397be079e8c949f4ad3e2f211ff0f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d226820239886c3df7fc248013389e7f6e397be079e8c949f4ad3e2f211ff0f5.exe
Resource
win10v2004-20220812-en
General
-
Target
d226820239886c3df7fc248013389e7f6e397be079e8c949f4ad3e2f211ff0f5
-
Size
297KB
-
MD5
fb9c45c9185d7116a70aaf947b058623
-
SHA1
7d891c040a6fa79656a3066211b61c10ac47b10c
-
SHA256
d226820239886c3df7fc248013389e7f6e397be079e8c949f4ad3e2f211ff0f5
-
SHA512
1bd6fe4c2cc352fe518dc0e1c8b895a2f5cd1d942ebd7f41d232d942741254cec338452e51d4ee9c6bd4ec6e364f1a69d2f2171464ba71ccc44729214b0b4966
-
SSDEEP
6144:xUsLeCgbf1PmV1k0ik3lFakZOYWp8jNp07QP1Ari5dKIw1ELXt+1wkLOP:iHBbkLnikVFFC+BW7+wZ1T
Malware Config
Signatures
Files
-
d226820239886c3df7fc248013389e7f6e397be079e8c949f4ad3e2f211ff0f5.exe windows x86
b584709d75576c89d8d772a850b968f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetExitCodeProcess
CreateThread
SetEvent
GetModuleHandleA
CloseHandle
TlsGetValue
LoadLibraryW
GetDiskFreeSpaceW
CreateFileA
FindAtomA
LocalFree
GetComputerNameA
GetTickCount
SetLastError
SuspendThread
GetCommandLineW
HeapCreate
GetFileAttributesA
ResetEvent
advapi32
RegDeleteKeyA
IsTokenRestricted
GetFileSecurityA
RegCreateKeyExA
RegEnumValueA
CredFree
CreateServiceW
GetLengthSid
RegQueryValueA
GetUserNameW
CloseEventLog
RegEnumKeyExA
RegCloseKey
cryptui
LocalEnroll
CryptUIDlgSelectStoreA
WizardFree
CryptUIDlgSelectCA
CryptUIDlgCertMgr
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ