Static task
static1
Behavioral task
behavioral1
Sample
b745d82bdc02635eb19d109d63b26e7180ac32670df12cc5ee0507f5dadeedc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b745d82bdc02635eb19d109d63b26e7180ac32670df12cc5ee0507f5dadeedc3.exe
Resource
win10v2004-20220812-en
General
-
Target
b745d82bdc02635eb19d109d63b26e7180ac32670df12cc5ee0507f5dadeedc3
-
Size
872KB
-
MD5
9218101c057406fa3ee3322c0620c602
-
SHA1
7c60a6f8d2a4b9b5cc75c535be150ddd6343856d
-
SHA256
b745d82bdc02635eb19d109d63b26e7180ac32670df12cc5ee0507f5dadeedc3
-
SHA512
23133f3ac9a85a230a26f7441d0db1629b1e57a1d7521e0ae0d41b0076dd8aecb5f6f653f0279930d38c12ea6094eb76c5529450196dcef9878a2645656e86ff
-
SSDEEP
12288:llj+TSxo8YBBYEn4sIva3/qOaKonpsYu/7cr69Nl1hD/k1ECacSPT6MEuJH2+qS:llj+BwvqlaTnpc/Q63BMyCLS/d24
Malware Config
Signatures
Files
-
b745d82bdc02635eb19d109d63b26e7180ac32670df12cc5ee0507f5dadeedc3.exe windows x86
ec199fb89dbf4fec6b88e580658f0a96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
I_CryptUninstallAsn1Module
CryptSetProviderU
CryptDecodeMessage
CertFindCertificateInStore
CertSetCRLContextProperty
CryptExportPublicKeyInfo
RegSetValueExU
CryptDecodeObject
CryptMsgVerifyCountersignatureEncoded
CryptGetDefaultOIDFunctionAddress
CertAddCRLContextToStore
I_CryptFindSmartCardCertInStore
RegQueryInfoKeyU
CryptDecryptAndVerifyMessageSignature
CertIsValidCRLForCertificate
CertRegisterSystemStore
CertFreeCRLContext
CertAddCRLLinkToStore
CryptGetOIDFunctionAddress
I_CertSrvProtectFunction
CryptSIPRetrieveSubjectGuid
I_CryptWalkAllLruCacheEntries
CryptFreeOIDFunctionAddress
I_CertSyncStore
I_CryptTouchLruEntry
CryptCreateAsyncHandle
CertCreateCertificateContext
CryptUninstallDefaultContext
CertAddEncodedCertificateToSystemStoreW
CertOpenSystemStoreA
CertOpenStore
CertFindAttribute
CertEnumCertificateContextProperties
CryptSIPAddProvider
msvcp60
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?infinity@?$numeric_limits@C@std@@SACXZ
?quiet_NaN@?$numeric_limits@H@std@@SAHXZ
??_F?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEXXZ
??0locale@std@@QAE@W4_Uninitialized@1@@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?pow@std@@YA?AV?$complex@M@1@ABV21@0@Z
wctrans
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?decimal_point@?$_Mpunct@G@std@@QBEGXZ
?_Doraise@out_of_range@std@@MBEXXZ
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDH@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
?polar@std@@YA?AV?$complex@N@1@ABN0@Z
?norm@std@@YAMABV?$complex@M@1@@Z
_Stof
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0bad_alloc@std@@QAE@PBD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
_FInf
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
_Exp
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?narrow@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEDGD@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Psum@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPADPADI@Z
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
kernel32
CopyFileExA
WriteConsoleOutputAttribute
GetLocalTime
VerifyVersionInfoW
WaitNamedPipeA
FlushFileBuffers
GetComputerNameA
EnumCalendarInfoW
LZInit
GetSystemInfo
IsBadHugeWritePtr
FindFirstFileExW
VirtualAlloc
DebugActiveProcessStop
InitializeSListHead
WriteConsoleOutputA
LocalCompact
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
FindResourceW
GetPrivateProfileSectionNamesA
LockFileEx
BindIoCompletionCallback
GetNumberFormatW
CommConfigDialogW
GetUserDefaultLangID
GetCurrentDirectoryW
SetCalendarInfoA
SetFirmwareEnvironmentVariableW
WriteConsoleA
GetVolumeInformationA
IsValidLocale
DefineDosDeviceW
GetNamedPipeHandleStateA
CreateHardLinkW
RtlZeroMemory
lz32
GetExpandedNameA
LZInit
LZSeek
LZCopy
LZCloseFile
LZStart
LZCreateFileW
GetExpandedNameW
LZOpenFileW
LZOpenFileA
LZClose
LZRead
LZDone
CopyLZFile
sqlunirl
_LoadKeyboardLayout_@8
_GetClassLong_@8
_FindFirstChangeNotification_@12
_CreateWindowStation_@16
_EnumPropsEx_@12
_lstrcpyn_@12
_GetClassInfoEx_@12
_GetTabbedTextExtent_@20
_EnumProps_@8
_GetCharWidth_@16
newWideCharFromMultiByte
_CreateDesktop_@24
_GetTextExtentPoint32@16
_ReplaceText_@4
_OpenMutex_@12
_Shell_NotifyIcon_@8
_GetSaveFileName@4
_LoadMenuIndirect_@4
_GetMenuItemInfo_@16
_SendNotifyMessage_@16
_GetCharWidth32_@16
_SetWindowLong@12
_GetTempFileName_@16
_WritePrivateProfileString_@16
_CreateEnhMetaFile_@16
_SetWindowText@8
msvcrt
__getmainargs
__set_app_type
__p__commode
exit
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 601KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE