Static task
static1
Behavioral task
behavioral1
Sample
8c0bdc4ee8ac99210d1ecd1657dd56a316e6642888093f4cee3b249f728d3889.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c0bdc4ee8ac99210d1ecd1657dd56a316e6642888093f4cee3b249f728d3889.exe
Resource
win10v2004-20220812-en
General
-
Target
8c0bdc4ee8ac99210d1ecd1657dd56a316e6642888093f4cee3b249f728d3889
-
Size
110KB
-
MD5
723c44ebd0778c27acbf6c67028f3d90
-
SHA1
cc24d9286f3133d0fc88888fee294adc6eb3afcd
-
SHA256
8c0bdc4ee8ac99210d1ecd1657dd56a316e6642888093f4cee3b249f728d3889
-
SHA512
a7d800134bcf8823a89ab6d59341519bbd1deeca808489f4e1b8470ef4ca2b804e8b39ebc73a59d24eb836e0e877be52624d3a30f33920f1ac34fb57821884e3
-
SSDEEP
3072:cAjRYRQb1suR1mOSviuB9k2lyas8eDJBoFqp2w/:cERKD99vYasD3og
Malware Config
Signatures
Files
-
8c0bdc4ee8ac99210d1ecd1657dd56a316e6642888093f4cee3b249f728d3889.exe windows x86
046a48ebb74cb796e9ac66d7641d83a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetCommandLineA
GetStartupInfoA
GetDriveTypeW
HeapDestroy
WriteConsoleW
WriteConsoleW
GetFileAttributesW
WriteConsoleW
CopyFileA
VirtualQueryEx
lstrlenW
VirtualProtect
GetPrivateProfileSectionW
SetEvent
lstrcpyA
Sleep
GetStdHandle
GetModuleHandleA
GetProcessHeap
CancelIo
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
cryptui
LocalEnroll
WizardFree
CryptUIWizImport
CryptUIStartCertMgr
LocalEnrollNoDS
CryptUIWizExport
LocalEnroll
CryptUIWizBuildCTL
DllRegisterServer
CryptUIWizDigitalSign
CryptUIDlgViewContext
WizardFree
DllUnregisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ