Static task
static1
Behavioral task
behavioral1
Sample
c7172b7705e2866f7192ebec02e95d8dff504d0248fc6d6da4b7763f044dae54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7172b7705e2866f7192ebec02e95d8dff504d0248fc6d6da4b7763f044dae54.exe
Resource
win10v2004-20221111-en
General
-
Target
c7172b7705e2866f7192ebec02e95d8dff504d0248fc6d6da4b7763f044dae54
-
Size
315KB
-
MD5
3dc7036b03b0e163c9a11e10e2081724
-
SHA1
e19fa945e12be6269514070f54cd03f0f6224f14
-
SHA256
c7172b7705e2866f7192ebec02e95d8dff504d0248fc6d6da4b7763f044dae54
-
SHA512
4bb35c91f520ceee0234f0b9a8bdc0ced37853638eb2597df3aee06270ef7d6b54b40a966b19f1fe3ab3bfb8441f484258bd2c94c6e993902bfe09ce4398d0bc
-
SSDEEP
6144:qchZDNY8cwkM1s6ifJQUX7RQLua38Ni+fEToQ18XkozZe0lQ6YNxxMBJBTC+j:qc35YZDM1s6iffXFRG8gcnO6YhMBbC
Malware Config
Signatures
Files
-
c7172b7705e2866f7192ebec02e95d8dff504d0248fc6d6da4b7763f044dae54.exe windows x86
1b38b842728545b513b684924f77f527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
ShowWindow
EnumWindowStationsW
IsIconic
SetRect
GetWindowRect
GetClientRect
kernel32
GetCurrentThreadId
Sleep
GetFileInformationByHandle
GetModuleHandleA
CloseHandle
CreateFileMappingA
GetCommandLineA
ExitProcess
GetUserDefaultUILanguage
OutputDebugStringA
GetVersionExW
certcli
CAGetCACertificate
Sections
.text Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edit Size: 5KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ