Static task
static1
Behavioral task
behavioral1
Sample
regclean_US.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
regclean_US.exe
Resource
win10v2004-20220812-en
General
-
Target
regclean_US.exe
-
Size
781KB
-
MD5
b52902b7e5f7b8e5cf9fbf60e0c83e83
-
SHA1
2c3504bc9e277a68d53e7d21d186c8adf0f3c495
-
SHA256
1b009cd26ea1fa5f5ba1b7a545d75bda99f18e86c78e5ac539e61027854a27b1
-
SHA512
77d7aa0e882f49298778041fb6cbfda81cd0a95d19e44cdf7983d933c4a3f383f2760a1e043823844c8f4f6a76358d5671de0475ee65686b05c7c5741fd92ca8
-
SSDEEP
24576:i/rU8mXF6nibPmu2/DMw1SwZzuBC9gZ7nI8xs:MAF6ijmX/D91SwgBAgZ7nI8a
Malware Config
Signatures
Files
-
regclean_US.exe.exe windows x86
c7f0797808af749f0f157ca95d498cf2
Code Sign
13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12/05/1997, 07:00Not After31/12/1999, 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12/05/1997, 07:00Not After31/12/1999, 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet10:47:36:cd:35:24:07:d2:1a:09:3a:95:1f:ac:c1:8cCertificate
IssuerOU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=InternetNot Before10/05/1997, 00:00Not After10/05/1998, 23:59SubjectCN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcA
GetClientRect
SetWindowPos
BeginPaint
GetSysColor
SetWindowWord
SetRect
EndPaint
RegisterClassA
UpdateWindow
GetWindowWord
SetWindowTextA
OemToCharA
OemToCharBuffA
PostMessageA
SendMessageA
EnableWindow
SetTimer
GetLastActivePopup
ShowWindow
KillTimer
GetSystemMetrics
DialogBoxIndirectParamA
GetWindowRect
SetCursor
GetDlgItemTextA
EndDialog
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
wsprintfA
MessageBoxA
LoadCursorA
kernel32
CreateDirectoryA
_lwrite
RtlUnwind
SetFileTime
GetModuleHandleA
SetErrorMode
GetCommandLineA
GetTempPathA
GetModuleFileNameA
GetVersion
GetWindowsDirectoryA
LocalFree
GlobalUnlock
LocalAlloc
GlobalFree
GlobalAlloc
GlobalHandle
GetProfileStringA
lstrcmpiA
GlobalLock
_llseek
_lclose
WinExec
lstrlenA
_lread
_lopen
FindClose
FindFirstFileA
SetCurrentDirectoryA
_lcreat
lstrcpyA
lstrcatA
LocalFileTimeToFileTime
DosDateTimeToFileTime
gdi32
SetBkColor
SetTextAlign
GetTextExtentPoint32A
GetBkColor
SetTextColor
DeleteObject
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 147B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_winzip_ Size: 749KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ