Static task
static1
Behavioral task
behavioral1
Sample
cea959af9b76646452ba62e05a8085fb7895f4331832c7615204aa1f7dd8571d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cea959af9b76646452ba62e05a8085fb7895f4331832c7615204aa1f7dd8571d.exe
Resource
win10v2004-20221111-en
General
-
Target
cea959af9b76646452ba62e05a8085fb7895f4331832c7615204aa1f7dd8571d
-
Size
70KB
-
MD5
e88bc26d333290cb8d1e92f34f2f8362
-
SHA1
b2feaf7123afa79723b60b2fadd27e636f41a0fa
-
SHA256
cea959af9b76646452ba62e05a8085fb7895f4331832c7615204aa1f7dd8571d
-
SHA512
d2e2b1f979c108bbd3cdc2f1d448e9efe90104648460fd09e6191dbd4339ab9e8752a0a8cf2d039694a34858280edb9ab0c39e056f4cc39907c9106e4ff3db03
-
SSDEEP
1536:PUieIF9y16Hq1vWSro37uMvON5b5RqgMhvIVSHlaBFwnyD:PTeIO1Mq1vr8ruMvOfrApHlJ+
Malware Config
Signatures
Files
-
cea959af9b76646452ba62e05a8085fb7895f4331832c7615204aa1f7dd8571d.exe windows x86
8823a55e9c200f42bc5ec7f08c7a9b32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetCalendarInfoA
CreateThread
VirtualProtect
TlsGetValue
GetModuleHandleA
GetTickCount
Sleep
SetEvent
CreateMutexA
GetSystemInfo
CloseHandle
FindResourceExA
ReleaseMutex
lstrlenA
DeleteCriticalSection
FindVolumeClose
SearchPathA
FindAtomA
GetLastError
user32
DialogBoxParamA
GetUpdateRect
GetMessageA
CopyImage
DragDetect
IsIconic
CreateWindowExA
GetScrollBarInfo
GetKeyState
DispatchMessageA
EnableWindow
CloseWindow
EndDialog
CreateMenu
polstore
IPSecFreePolStr
IPSecAllocPolStr
IPSecCopyNFAData
IPSecAssignPolicy
IPSecAllocPolMem
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ