Static task
static1
Behavioral task
behavioral1
Sample
c31c550a5eded122c4d337a4882d50a1f9fc66d751b5677dc5e8999847f25c08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c31c550a5eded122c4d337a4882d50a1f9fc66d751b5677dc5e8999847f25c08.exe
Resource
win10v2004-20221111-en
General
-
Target
c31c550a5eded122c4d337a4882d50a1f9fc66d751b5677dc5e8999847f25c08
-
Size
131KB
-
MD5
a8f7e66a217b0df0b6f2e1f5ed0f542f
-
SHA1
847fdb911dade9a78a69d8316775242da96b36a8
-
SHA256
c31c550a5eded122c4d337a4882d50a1f9fc66d751b5677dc5e8999847f25c08
-
SHA512
248a09ca0a288d98648834961abafb7ed285ff4394807a5e691e4024528dc495b54265f46b0d63c8588f0e884068cf5223a98843c95e62761de08a0aa0cd2a9d
-
SSDEEP
3072:HAByHJdOc7NGKmNXB5UQdPiZco8pHRXQ5ZsfdM5rf8VYIg:HAgpd5NG3XXnRI2RZfdM5rkVYIg
Malware Config
Signatures
Files
-
c31c550a5eded122c4d337a4882d50a1f9fc66d751b5677dc5e8999847f25c08.exe windows x86
40be0b86fa65f69155ad1f1a6e58fd87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTime
GetDiskFreeSpaceW
GetExitCodeProcess
CloseHandle
SetEvent
GetCommandLineW
GetFileAttributesA
LocalFree
SetLastError
HeapCreate
GetComputerNameA
GetTickCount
TlsGetValue
CreateFileA
FindAtomA
SuspendThread
GetModuleHandleA
CreateThread
ResetEvent
advapi32
RegDeleteKeyA
RegCloseKey
CloseEventLog
GetUserNameW
RegQueryValueA
CreateServiceW
GetFileSecurityA
CredFree
IsTokenRestricted
RegEnumKeyExA
RegCreateKeyExA
GetLengthSid
RegEnumValueA
cryptui
LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ