Static task
static1
Behavioral task
behavioral1
Sample
b55ca2ce865b1ac9aa430291440d871610466d0a820645922271bdb7df4b6f6c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b55ca2ce865b1ac9aa430291440d871610466d0a820645922271bdb7df4b6f6c.exe
Resource
win10v2004-20220812-en
General
-
Target
b55ca2ce865b1ac9aa430291440d871610466d0a820645922271bdb7df4b6f6c
-
Size
86KB
-
MD5
5a65a4f8c71b7d54335d9766826037bd
-
SHA1
b3163a691ecbef99bee83079935a17887bb5a7d8
-
SHA256
b55ca2ce865b1ac9aa430291440d871610466d0a820645922271bdb7df4b6f6c
-
SHA512
77e63f56bdad7c79beb1c63ef7392902f2b4915f47e2ce6ae7cc4d3172075fbc1b6107ab9592229650baa6f9190a564546bc42e4398724b3c7b1f8b7f7711d9e
-
SSDEEP
1536:QWcpMG6mGrX1Z0v6Ebps5Rn/FUrk84BrU0TpsJ8ozlJ3GmePlKLGs/oErLy/E+2S:Qs56b65RntEk84W0Tc80vc2L71uYrY
Malware Config
Signatures
Files
-
b55ca2ce865b1ac9aa430291440d871610466d0a820645922271bdb7df4b6f6c.exe windows x86
acd621fb85d4238df8c86602300aef24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RequestDeviceWakeup
CloseProfileUserMapping
GetTickCount
GetLogicalDriveStringsW
UpdateResourceW
GetStartupInfoA
LoadLibraryA
GetCurrentThreadId
ReadFile
PostQueuedCompletionStatus
CreateProcessW
GetCommConfig
GetCurrentProcessId
GlobalAddAtomA
SetConsoleInputExeNameW
GetOverlappedResult
HeapCreate
SetPriorityClass
SystemTimeToFileTime
GetSystemTimeAsFileTime
VirtualAlloc
QueryPerformanceCounter
ClearCommError
DelayLoadFailureHook
GetTimeZoneInformation
msvcirt
?is_open@filebuf@@QBEHXZ
??0iostream@@IAE@ABV0@@Z
?get@istream@@QAEAAV1@AAVstreambuf@@D@Z
??0exception@@QAE@ABQBD@Z
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
??_Eostream@@UAEPAXI@Z
?attach@ifstream@@QAEXH@Z
?flags@ios@@QBEJXZ
??0ostrstream@@QAE@PADHH@Z
?write@ostream@@QAEAAV1@PBDH@Z
?clrlock@ios@@QAAXXZ
??5istream@@QAEAAV0@AAJ@Z
??5istream@@QAEAAV0@AAE@Z
??_7ostrstream@@6B@
??6ostream@@QAEAAV0@C@Z
certcli
CAGetCertTypeExpiration
CAOIDCreateNew
CACreateNewCA
CACertTypeSetSecurity
CAAccessCheck
CAUpdateCertType
DllRegisterServer
DllUnregisterServer
CACreateCertType
CAFindCertTypeByName
CADeleteCA
DllInstall
CASetCertTypeExtension
CACloseCertType
CAOIDSetProperty
CACreateAutoEnrollmentObjectEx
CASetCACertificate
CAOIDFreeProperty
CADeleteLocalAutoEnrollmentObject
CASetCertTypeKeySpec
CAOIDFreeLdapURL
CAEnumCertTypes
CASetCertTypeExpiration
msi
MsiRecordIsNull
MsiSummaryInfoGetPropertyCount
MsiIsProductElevatedW
MsiQueryProductStateW
MsiDatabaseMergeA
MsiAdvertiseProductW
MsiReinstallFeatureFromDescriptorW
MsiEnumComponentQualifiersW
MsiProvideAssemblyW
MsiDatabaseOpenViewA
MsiQueryFeatureStateW
MsiGetPatchInfoA
DllRegisterServer
MsiConfigureFeatureA
MsiGetFileSignatureInformationW
MsiGetComponentStateW
MsiSourceListClearAllW
MsiEnableLogW
MsiSourceListAddSourceW
MsiRecordGetFieldCount
MsiGetDatabaseState
MsiEnumProductsA
MsiRecordDataSize
MsiAdvertiseProductExW
MsiGetFileHashA
crypt32
CryptMsgGetParam
CryptUnregisterOIDInfo
PFXExportCertStoreEx
CertStrToNameW
CertVerifyCTLUsage
CryptMsgOpenToDecode
CryptSetProviderU
CryptMemRealloc
CryptGetOIDFunctionAddress
CertFindCRLInStore
CertFindSubjectInCTL
CertFreeCertificateChain
CryptUnprotectData
CryptMsgClose
CryptFindOIDInfo
CertOpenSystemStoreW
CryptFindLocalizedName
CertEnumSystemStore
RegEnumValueU
CryptGetMessageCertificates
CryptHashMessage
regapi
RegWinStationQueryEx
RegWdCreateW
RegWinStationQueryValueW
RegGetMachinePolicy
RegWdEnumerateW
RegWinStationQueryW
RegGetUserPolicy
RegPdQueryW
RegWdDeleteW
RegDefaultUserConfigQueryA
RegUserConfigDelete
RegPdEnumerateW
RegWdQueryW
RegCdCreateW
RegWinStationQuerySecurityA
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ