Static task
static1
Behavioral task
behavioral1
Sample
cee04ff518314615f62b93f62565324cb6307f77f46b32253609fec6a2d1cad9.exe
Resource
win7-20220812-en
General
-
Target
cee04ff518314615f62b93f62565324cb6307f77f46b32253609fec6a2d1cad9
-
Size
100KB
-
MD5
1e3cb3a90e2c0246c2d2e682c8d01c72
-
SHA1
37c1384d9bba04d73390d8d31a2f799d76ba5852
-
SHA256
cee04ff518314615f62b93f62565324cb6307f77f46b32253609fec6a2d1cad9
-
SHA512
75d0c82a4162d64b152db412b660ef172332dc064dcd1d6fb6376535a0e46dfbee29d4d34e3294e9acf740464a2e66f1bacd7749b4cdc623046e8d6431f6356b
-
SSDEEP
1536:UGPXxyUbVJGL+B9Ky3pWGAMUKlN7nWY4zigb2kfsqcwj5CFNWt4i6X:tJbVAiiyNNbWv0qcg54a4i6X
Malware Config
Signatures
Files
-
cee04ff518314615f62b93f62565324cb6307f77f46b32253609fec6a2d1cad9.exe windows x86
7ab53776aefa7852c62e21b41774f38d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
LoadLibraryW
GetProcAddress
GetCurrentProcess
InterlockedDecrement
InitializeCriticalSection
GlobalAlloc
FileTimeToLocalFileTime
SetLastError
GetCPInfo
InterlockedIncrement
GetTickCount
GlobalLock
GetModuleHandleA
lstrcpyW
GetSystemDefaultLangID
GetDateFormatW
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
IsBadReadPtr
lstrlenW
OutputDebugStringA
LocalFree
FormatMessageW
OutputDebugStringW
GetComputerNameW
lstrcmpiW
GetModuleFileNameW
GlobalUnlock
GetEnvironmentStringsW
GetSystemWindowsDirectoryW
FileTimeToSystemTime
CloseHandle
GlobalFree
CreateFileW
RemoveDirectoryA
LocalReAlloc
GetLastError
GetStartupInfoA
user32
WinHelpW
GetParent
RegisterClipboardFormatW
SetWindowTextW
EndDialog
DialogBoxParamW
LoadImageW
LoadStringW
EnableWindow
InsertMenuItemW
SetWindowLongW
LoadBitmapW
GetWindowLongW
LoadCursorW
SetCursor
PostMessageW
SetFocus
SendMessageW
LoadIconW
SystemParametersInfoW
ReleaseDC
SendDlgItemMessageW
wsprintfW
SetDlgItemTextW
GetDC
GetDlgItem
GetDlgItemTextA
MessageBoxW
certcli
CACloseCA
CAFindCertTypeByName
CASetCertTypeKeySpec
CAFreeCertTypeProperty
CAAddCACertificateType
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CAEnumNextCertType
CACertTypeGetSecurity
CAGetCAProperty
CAFindByName
CAGetCertTypeKeySpec
CACertTypeSetSecurity
CARemoveCACertificateType
CACloseCertType
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CASetCertTypeFlags
CAEnumCertTypes
CASetCertTypeExtension
CACreateCertType
CAGetCertTypePropertyEx
CAUpdateCA
CAGetCertTypeProperty
CASetCertTypeProperty
CAUpdateCertType
CAFreeCAProperty
msvcrt
?terminate@@YAXXZ
wcslen
__RTDynamicCast
mbstowcs
_wcsupr
vswprintf
wcsrchr
_except_handler3
__dllonexit
wcsstr
_wcsicmp
memmove
_initterm
wcstoul
_adjust_fdiv
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_onexit
wcscat
wcscmp
malloc
free
wcschr
??2@YAPAXI@Z
wcscpy
advapi32
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ