Static task
static1
Behavioral task
behavioral1
Sample
535f92179b2fdb07268697db10f62ca77f5faf9005d63aadfbc3fcbd93f0f9b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
535f92179b2fdb07268697db10f62ca77f5faf9005d63aadfbc3fcbd93f0f9b7.exe
Resource
win10v2004-20220812-en
General
-
Target
535f92179b2fdb07268697db10f62ca77f5faf9005d63aadfbc3fcbd93f0f9b7
-
Size
68KB
-
MD5
ff4243c5f43309ec7f9f778d5637c706
-
SHA1
3b4b2f6f823ff29b0f7fd4516b9324c35ecdb341
-
SHA256
535f92179b2fdb07268697db10f62ca77f5faf9005d63aadfbc3fcbd93f0f9b7
-
SHA512
9af47d66f1925312607fbb04dd3a9f07593d49e80c1554c393188871dca0452cf6bb5fa81ac5671d4f4377537b3ceeae15173412011c8b895f60945b512711bb
-
SSDEEP
768:rNvGQQQQQQQQQQQrAzYcmvr9J76wuKepXUEwR3VhXv6wHCORN48MK:rNv56Di7PuHZGbXv6wH5
Malware Config
Signatures
Files
-
535f92179b2fdb07268697db10f62ca77f5faf9005d63aadfbc3fcbd93f0f9b7.exe windows x86
fe493c542b2bb08b6bfd20971b9fbd2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
LoadLibraryExW
LocalFree
CloseHandle
PulseEvent
GetCommandLineA
HeapCreate
Sleep
UnmapViewOfFile
GetComputerNameA
GetCurrentDirectoryA
SetLastError
GetCurrentThreadId
GlobalUnlock
CreateFileW
FindClose
FindResourceW
lstrlenA
GetModuleHandleA
CreateProcessA
user32
CreateIcon
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawMenuBar
SetFocus
GetCaretPos
CreateWindowExA
IsWindow
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll
WizardFree
msctf
TF_InitSystem
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ