Static task
static1
Behavioral task
behavioral1
Sample
77331b3a635d0c96f39b319be61a4d8e592824a9ba97d8649923537c1fe5113f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77331b3a635d0c96f39b319be61a4d8e592824a9ba97d8649923537c1fe5113f.exe
Resource
win10v2004-20220812-en
General
-
Target
77331b3a635d0c96f39b319be61a4d8e592824a9ba97d8649923537c1fe5113f
-
Size
117KB
-
MD5
71e74c5e225913dd7e4cfe6677309c00
-
SHA1
dcc1c6ef129d7773293465ef6b1a2b2468d47d60
-
SHA256
77331b3a635d0c96f39b319be61a4d8e592824a9ba97d8649923537c1fe5113f
-
SHA512
8c7c8558c7f55591fc19324e990f588c67ba7b7e55ef0f8571f48e702946b8d1710f74aa1b9d3aaeac59168c39735346ddb46afe254adeecab95b3d69c2d7805
-
SSDEEP
3072:o5nzVcKPkfPelKp2ZAv3eZE5AP692Ff8BQ+EnDzr:o5nzVpGPpp/eZEaCc58oD
Malware Config
Signatures
Files
-
77331b3a635d0c96f39b319be61a4d8e592824a9ba97d8649923537c1fe5113f.exe windows x86
bd82bcb7733f7c8b35e53be498287242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
WriteConsoleW
lstrlenW
WriteConsoleW
lstrcpyA
GetDriveTypeW
GetStdHandle
VirtualProtect
GetProcessHeap
DeleteFileA
GetModuleHandleA
GetFileAttributesA
GetPrivateProfileSectionW
Sleep
CopyFileA
WriteConsoleW
GetStartupInfoA
HeapDestroy
SetEvent
VirtualQueryEx
CancelIo
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
DllRegisterServer
LocalEnroll
CryptUIWizImport
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizExport
DllUnregisterServer
WizardFree
CryptUIWizBuildCTL
LocalEnroll
WizardFree
CryptUIWizDigitalSign
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ