Static task
static1
Behavioral task
behavioral1
Sample
02e53517cf6f9e6e99e6c04e030186ca8e337d268a64efed47387c90a2c72d3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02e53517cf6f9e6e99e6c04e030186ca8e337d268a64efed47387c90a2c72d3b.exe
Resource
win10v2004-20220812-en
General
-
Target
02e53517cf6f9e6e99e6c04e030186ca8e337d268a64efed47387c90a2c72d3b
-
Size
772KB
-
MD5
6c9c567573f2d367449f7df505310163
-
SHA1
0db0011d6b0f586c663b164bfe558a231fcdaa06
-
SHA256
02e53517cf6f9e6e99e6c04e030186ca8e337d268a64efed47387c90a2c72d3b
-
SHA512
598f9bde93fbe09eef9e2fbba48492a4b7c08b64cac680cc9c94b00907967c86b08496e361aa701304cfcb0dea005088cb06d88391ef3e28d08bfb4cdd583ce6
-
SSDEEP
24576:s6e3KiU32LajBJFpdIobsBSPm07f200io9C:s6e3ZUqcvXd9YB6mGu00Z
Malware Config
Signatures
Files
-
02e53517cf6f9e6e99e6c04e030186ca8e337d268a64efed47387c90a2c72d3b.exe windows x86
39ea48dd10efbc9d4b2e8e1c20b5a95d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
GetFileAttributesW
lstrlenW
GetCommandLineA
WriteConsoleW
HeapDestroy
Sleep
WriteConsoleW
GetStartupInfoA
CopyFileA
GetProcessHeap
VirtualProtect
DeleteFileA
GetModuleHandleA
ResumeThread
GetDriveTypeW
lstrcpyA
VirtualQueryEx
GetStdHandle
WriteConsoleW
SetEvent
mmcndmgr
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
cryptui
LocalEnroll
CryptUIWizDigitalSign
DllRegisterServer
LocalEnroll
LocalEnrollNoDS
DllUnregisterServer
CryptUIStartCertMgr
CryptUIDlgViewContext
CryptUIWizExport
CryptUIWizBuildCTL
WizardFree
WizardFree
CryptUIWizImport
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 765KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ