Static task
static1
Behavioral task
behavioral1
Sample
21a184ce64ae6fe3c15127596118072a74d3c9764ed97d36035379415a169716.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21a184ce64ae6fe3c15127596118072a74d3c9764ed97d36035379415a169716.exe
Resource
win10v2004-20220812-en
General
-
Target
21a184ce64ae6fe3c15127596118072a74d3c9764ed97d36035379415a169716
-
Size
816KB
-
MD5
907691aa62f98ba4be1105c78747fb78
-
SHA1
3d2a7f0b92687a927aceab371be71b063ec364af
-
SHA256
21a184ce64ae6fe3c15127596118072a74d3c9764ed97d36035379415a169716
-
SHA512
cb9496e262f350fb50822e35b1941f43f63d5785dbc1dc5b062a4ab0c14322704ea1b554158404e693aca9b9fa5074ca3c0d95281251ce6a6bed6f6ff339c6cc
-
SSDEEP
24576:nGmzUOl+HFpyyvh6PG+vA9kjB+wyozhn1eXF/6H:GmzUOwlpyyj+DjB+Ch1AF/6
Malware Config
Signatures
Files
-
21a184ce64ae6fe3c15127596118072a74d3c9764ed97d36035379415a169716.exe windows x86
ff0a83856ef3c451d8cfb02c713a414c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
lstrlenA
FormatMessageW
lstrlenA
GetModuleHandleA
GetPrivateProfileIntA
GetDiskFreeSpaceW
lstrcmpA
SetThreadPriority
lstrlenA
GetCurrentDirectoryA
lstrlenA
TlsGetValue
OpenMutexA
VirtualFree
lstrlenA
GetCommandLineA
WriteConsoleW
lstrlenA
lstrlenA
GetFileSize
ReadFile
CreateDirectoryW
lstrlenA
lstrlenA
GetCurrentThreadId
lstrlenA
VirtualProtect
DeleteFileW
certcli
CAEnumFirstCA
CAEnumNextCA
CADeleteCertType
CADeleteCA
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE