Static task
static1
Behavioral task
behavioral1
Sample
b6f86c5ccb01f0d6d4ff19243500d7820330452332d0d52baaeea3b5de9c940e.exe
Resource
win7-20220812-en
General
-
Target
b6f86c5ccb01f0d6d4ff19243500d7820330452332d0d52baaeea3b5de9c940e
-
Size
103KB
-
MD5
ab34128da7880f2749115786a9f3f0a1
-
SHA1
2ef2b1c4d3e226777da3277e7700d276418b2237
-
SHA256
b6f86c5ccb01f0d6d4ff19243500d7820330452332d0d52baaeea3b5de9c940e
-
SHA512
cb2f17f9798c2facb2759bd73144cb83d5e353f7f83a4a13dbdc787871b0049d8d1f84969d13281c75ca9dc1d1f386fd8ab8ea7a75417166331d750b83b8e3d5
-
SSDEEP
1536:NvtPcVfcMQQP+Pil4CD2QcFwg83915IkghaY5JOgVfEN51gzrv:NvaVf5QQP+6l4C27wp9jI19VfEN51Q
Malware Config
Signatures
Files
-
b6f86c5ccb01f0d6d4ff19243500d7820330452332d0d52baaeea3b5de9c940e.exe windows x86
c9ad3e11ff6a5e576e3e69c292a817ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
GlobalFree
SetLastError
WideCharToMultiByte
GlobalAlloc
lstrcpyW
GetProcAddress
InterlockedIncrement
GetTickCount
LoadLibraryW
GetLastError
InitializeCriticalSection
InterlockedDecrement
lstrcmpiW
GetModuleFileNameW
OutputDebugStringW
CreateFileW
FileTimeToSystemTime
FormatMessageW
OutputDebugStringA
GetModuleHandleA
lstrlenW
LocalFree
CloseHandle
GetSystemTimeAsFileTime
GetStartupInfoA
GetCurrentThread
IsBadReadPtr
GetCPInfo
DeleteCriticalSection
GetSystemDefaultLangID
SetUnhandledExceptionFilter
GetCurrentProcess
GetDateFormatW
GetSystemWindowsDirectoryW
LocalReAlloc
GetComputerNameW
GlobalLock
QueryPerformanceCounter
GlobalUnlock
GetEnvironmentStringsW
user32
MessageBoxW
LoadCursorW
GetParent
ReleaseDC
DialogBoxParamW
EndDialog
GetDlgItemTextA
LoadIconW
SendDlgItemMessageW
GetWindowLongW
EnableWindow
SetDlgItemTextW
SetWindowLongW
LoadBitmapW
LoadImageW
RegisterClipboardFormatW
GetDlgItem
InsertMenuItemW
SetCursor
wsprintfW
GetDC
LoadStringW
WinHelpW
PostMessageW
SetWindowTextW
SendMessageW
SetFocus
SystemParametersInfoW
certcli
CAGetCertTypeExtensions
CAGetCAProperty
CACreateCertType
CAFindByName
CAFindCertTypeByName
CAEnumCertTypes
CASetCertTypeExtension
CAEnumNextCertType
CAFreeCertTypeProperty
CAUpdateCertType
CACloseCertType
CACloseCA
CASetCertTypeProperty
CASetCertTypeFlags
CAGetCertTypePropertyEx
CASetCertTypeKeySpec
CACertTypeSetSecurity
CAFreeCAProperty
CAUpdateCA
CAAddCACertificateType
CAGetCertTypeFlags
CAEnumCertTypesForCA
CACertTypeGetSecurity
CARemoveCACertificateType
CAGetCertTypeProperty
CAFreeCertTypeExtensions
CAGetCertTypeKeySpec
msvcrt
mbstowcs
??1type_info@@UAE@XZ
wcstoul
wcslen
wcsrchr
wcscat
_except_handler3
__dllonexit
wcscpy
vswprintf
wcsstr
__RTDynamicCast
??3@YAXPAX@Z
free
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z
wcscmp
malloc
_initterm
_wcsicmp
wcschr
_adjust_fdiv
_wcsupr
memmove
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ