Static task
static1
Behavioral task
behavioral1
Sample
d6709e1925b176764014cfb93504d0e33073caaf08d62c58a97ef369049853ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6709e1925b176764014cfb93504d0e33073caaf08d62c58a97ef369049853ee.exe
Resource
win10v2004-20220812-en
General
-
Target
d6709e1925b176764014cfb93504d0e33073caaf08d62c58a97ef369049853ee
-
Size
118KB
-
MD5
6f3bd8758460539dac5c7fb9e4b8fc00
-
SHA1
9eaf273d064d482d58dd5af6bab7b757e09cd390
-
SHA256
d6709e1925b176764014cfb93504d0e33073caaf08d62c58a97ef369049853ee
-
SHA512
dc4b90e7ce8b88e2f207990b82e79a6c2405cdd6e2dbd9d95fc173626510e198ab5544d3dfcdb288768df4c97f426b3bc3f2c0ab5488fee931b81a52033ac68c
-
SSDEEP
3072:924T4vvchF8PEviv60ORvzGu+LxEBaUry1z8pdV4mA67YlfU5:UDWFZiCutQpW6cls5
Malware Config
Signatures
Files
-
d6709e1925b176764014cfb93504d0e33073caaf08d62c58a97ef369049853ee.exe windows x86
ca15f5cc774579660345fe57f4c7784e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
WriteConsoleW
GetStdHandle
VirtualQueryEx
CopyFileA
ResumeThread
DeleteFileA
GetStartupInfoA
lstrlenW
Sleep
GetFileAttributesW
WriteConsoleW
WriteConsoleW
lstrcpyA
GetModuleHandleA
GetProcessHeap
GetPrivateProfileSectionW
HeapDestroy
VirtualProtect
SetEvent
GetDriveTypeW
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
cryptui
CryptUIWizBuildCTL
LocalEnroll
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIWizImport
CryptUIDlgViewContext
WizardFree
CryptUIWizExport
WizardFree
CryptUIStartCertMgr
DllRegisterServer
LocalEnroll
DllUnregisterServer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ