Static task
static1
Behavioral task
behavioral1
Sample
8ae738e37eebae3e09c7ea9446a160ec546b1747b364a4aa0d3c9d10d4495c1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ae738e37eebae3e09c7ea9446a160ec546b1747b364a4aa0d3c9d10d4495c1a.exe
Resource
win10v2004-20220812-en
General
-
Target
8ae738e37eebae3e09c7ea9446a160ec546b1747b364a4aa0d3c9d10d4495c1a
-
Size
118KB
-
MD5
63e91237f680c15f929fedc8b7ca161e
-
SHA1
01fb918911a4253b1d943a08943589dd6c50ad40
-
SHA256
8ae738e37eebae3e09c7ea9446a160ec546b1747b364a4aa0d3c9d10d4495c1a
-
SHA512
5ccb92eceb19c4dd426b891641ec1ed9658ac075e52447e63c730189c3a7c723003bfea6d9f33fc10f2f35170f8c1e35bc8ba4c869791e4d2c7ee96a47557ecc
-
SSDEEP
3072:FZXffswGVNKjnRZuIU6voGJaDuiGQQaDWhIfdJ0LKSDBdj:n1wCn7u/6QYMuiGQReIFJMz
Malware Config
Signatures
Files
-
8ae738e37eebae3e09c7ea9446a160ec546b1747b364a4aa0d3c9d10d4495c1a.exe windows x86
9178f00b0e73678ce6273db42e7e5382
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetStdHandle
SetEvent
GetFileAttributesW
lstrcpyA
WriteConsoleW
GetDriveTypeW
WriteConsoleW
lstrlenW
VirtualProtect
WriteConsoleW
GetStartupInfoA
CancelIo
GetModuleHandleA
GetProcessHeap
GetPrivateProfileSectionW
GetCommandLineA
CopyFileA
DeleteFileA
Sleep
VirtualQueryEx
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer
cryptui
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizBuildCTL
WizardFree
LocalEnroll
DllUnregisterServer
WizardFree
CryptUIStartCertMgr
CryptUIWizDigitalSign
LocalEnroll
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ