Static task
static1
Behavioral task
behavioral1
Sample
d5e67751fe0ef27b79e6f8879feff7346720a0cc5628d05772d3ef484773e0eb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d5e67751fe0ef27b79e6f8879feff7346720a0cc5628d05772d3ef484773e0eb.exe
Resource
win10v2004-20220812-en
General
-
Target
d5e67751fe0ef27b79e6f8879feff7346720a0cc5628d05772d3ef484773e0eb
-
Size
292KB
-
MD5
6fd435a3fcac62472eafd244ab18ec02
-
SHA1
c078c5d368c2b7841e6f77f9f8d9a6693a2d0b91
-
SHA256
d5e67751fe0ef27b79e6f8879feff7346720a0cc5628d05772d3ef484773e0eb
-
SHA512
faf1d6e358100a2da44409b3b1bfc43525d35841b1e19af910a8f5f93ee3cd5793d4f2e3693458144c5c27e62093c78316c5f1c9cda06fe9d859afa14600558c
-
SSDEEP
6144:5e2+6SS55GWkvy9+DEGg7AOPzI1odwyPZZzxoj:5H+MLam+4VIUbZZz
Malware Config
Signatures
Files
-
d5e67751fe0ef27b79e6f8879feff7346720a0cc5628d05772d3ef484773e0eb.exe windows x86
bebf2df3c4ee70f094ac0fc7ea4ec50e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
GetStartupInfoA
GetModuleHandleA
GetDriveTypeW
VirtualProtect
GetProcessHeap
GetStdHandle
CancelIo
lstrcpyA
HeapDestroy
GetFileAttributesW
WriteConsoleW
GetCommandLineA
VirtualQueryEx
SetEvent
CopyFileA
WriteConsoleW
GetPrivateProfileSectionW
WriteConsoleW
DeleteFileA
Sleep
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIWizBuildCTL
CryptUIWizExport
WizardFree
LocalEnroll
CryptUIWizDigitalSign
CryptUIStartCertMgr
LocalEnroll
CryptUIDlgViewContext
DllUnregisterServer
DllRegisterServer
CryptUIWizImport
WizardFree
LocalEnrollNoDS
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ