Static task
static1
Behavioral task
behavioral1
Sample
aded0dc87a32fc023d5e8103a250e667f4e8773fd4582828c847d8850189bc12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aded0dc87a32fc023d5e8103a250e667f4e8773fd4582828c847d8850189bc12.exe
Resource
win10v2004-20220901-en
General
-
Target
aded0dc87a32fc023d5e8103a250e667f4e8773fd4582828c847d8850189bc12
-
Size
118KB
-
MD5
06b6bebd9234451edafbaaaf00aa7010
-
SHA1
28cab1ff6f0b7d3e781d63a557f2ce037bd53ded
-
SHA256
aded0dc87a32fc023d5e8103a250e667f4e8773fd4582828c847d8850189bc12
-
SHA512
6d7e2fed83ee420070aa31337c50fa6f72817e90b25952ab679163a45a1d29b56f0b0ba204ed098a7a371521f082a011ca3d646721157e3bc15174eda05f68bf
-
SSDEEP
1536:ydGclEJNUuMdafylRgDjetRZiCzWfqKcIlHEnvR162M6gEL4ggiViva0xW8PPpQG:yon+RZiCfK9EJ16WF9giVivhxWQpE
Malware Config
Signatures
Files
-
aded0dc87a32fc023d5e8103a250e667f4e8773fd4582828c847d8850189bc12.exe windows x86
51ea6f19a9ab68505119b1157cf2db7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
CopyFileA
WriteConsoleW
WriteConsoleW
VirtualProtect
GetStdHandle
lstrlenW
WriteConsoleW
DeleteFileA
VirtualQueryEx
lstrcpyA
SetEvent
GetDriveTypeW
GetCommandLineA
GetProcessHeap
GetStartupInfoA
Sleep
GetModuleHandleA
GetPrivateProfileSectionW
ResumeThread
GetFileAttributesW
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
cryptui
WizardFree
CryptUIWizImport
CryptUIDlgViewContext
DllUnregisterServer
LocalEnroll
CryptUIWizDigitalSign
DllRegisterServer
LocalEnroll
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizBuildCTL
CryptUIWizExport
WizardFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.expimp Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ