Static task
static1
Behavioral task
behavioral1
Sample
f76b3d1057670bfdec4053ce896d4b2bf7956a8e3e5f2bd38c8b8d78605cf664.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f76b3d1057670bfdec4053ce896d4b2bf7956a8e3e5f2bd38c8b8d78605cf664.exe
Resource
win10v2004-20220901-en
General
-
Target
f76b3d1057670bfdec4053ce896d4b2bf7956a8e3e5f2bd38c8b8d78605cf664
-
Size
291KB
-
MD5
6b7acf8fa5df9c206a2429aa43aa3790
-
SHA1
90a3e825d15b9f39f95946dac45d3ae6c652cfa6
-
SHA256
f76b3d1057670bfdec4053ce896d4b2bf7956a8e3e5f2bd38c8b8d78605cf664
-
SHA512
55c246f3746d4debdbd8587a7f357d77ed356372cf9705edd007f275b60f96e1ab0d9799a51f307d024007faa17688139780e0e3e82b6ca94022daee4d6e7dab
-
SSDEEP
6144:D23oO1y5m9Bpuvc1WNxFQlZEVcYG6I+UuyFUPpaJ:DYzZrcU1IFxtG6I+Uu7M
Malware Config
Signatures
Files
-
f76b3d1057670bfdec4053ce896d4b2bf7956a8e3e5f2bd38c8b8d78605cf664.exe windows x86
ec8172345aa675833f19384ac34f6c56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
VirtualProtect
GetStartupInfoA
CancelIo
VirtualQueryEx
WriteConsoleW
GetProcessHeap
lstrlenW
GetModuleHandleA
GetDriveTypeW
GetFileAttributesA
WriteConsoleW
lstrcpyA
GetStdHandle
HeapDestroy
GetCommandLineA
CopyFileA
DeleteFileA
GetPrivateProfileSectionW
Sleep
WriteConsoleW
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
cryptui
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizExport
CryptUIWizBuildCTL
LocalEnroll
CryptUIWizImport
LocalEnroll
CryptUIDlgViewContext
DllUnregisterServer
CryptUIWizDigitalSign
WizardFree
DllRegisterServer
WizardFree
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ