Static task
static1
Behavioral task
behavioral1
Sample
972923834e449ce5393ffc8fdfa0f10bd3bf718b5b17bc3bff016c6560af5947.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
972923834e449ce5393ffc8fdfa0f10bd3bf718b5b17bc3bff016c6560af5947.exe
Resource
win10v2004-20220812-en
General
-
Target
972923834e449ce5393ffc8fdfa0f10bd3bf718b5b17bc3bff016c6560af5947
-
Size
117KB
-
MD5
7986fa17cbc62609376520f6a45158ae
-
SHA1
76dfe0bff8635e046dc3926b9007fc9625d35f32
-
SHA256
972923834e449ce5393ffc8fdfa0f10bd3bf718b5b17bc3bff016c6560af5947
-
SHA512
6cedb99d1c6d31d4da56818f8314c99615ddf70b44ee02f2c59c177c17e479caef369f5d573e99555963a01525a4a2bb8a89f5144461b5632447543285bc66bc
-
SSDEEP
3072:Fso2BWNA0x8UPhhEN1SoZukJZzcsnfAQhiLyobQ0M:Fs1BWNLJhEGoBJ9csnIQhEc
Malware Config
Signatures
Files
-
972923834e449ce5393ffc8fdfa0f10bd3bf718b5b17bc3bff016c6560af5947.exe windows x86
41eadf897a395b2d0fd32901faa64cd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
HeapDestroy
WriteConsoleW
VirtualProtect
GetPrivateProfileSectionW
GetFileAttributesA
lstrcpyA
GetDriveTypeW
DeleteFileA
GetCommandLineA
CancelIo
CopyFileA
SetEvent
GetModuleHandleA
VirtualQueryEx
Sleep
WriteConsoleW
GetStdHandle
lstrlenW
GetProcessHeap
WriteConsoleW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
DllGetClassObject
cryptui
CryptUIWizImport
WizardFree
WizardFree
LocalEnroll
CryptUIStartCertMgr
CryptUIWizBuildCTL
LocalEnroll
DllRegisterServer
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIWizDigitalSign
CryptUIWizExport
DllUnregisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ