Static task
static1
Behavioral task
behavioral1
Sample
7532a49037618b488c778eda56ee0b9e656acf7bed9aafb7b75278a1ef566fc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7532a49037618b488c778eda56ee0b9e656acf7bed9aafb7b75278a1ef566fc8.exe
Resource
win10v2004-20220812-en
General
-
Target
7532a49037618b488c778eda56ee0b9e656acf7bed9aafb7b75278a1ef566fc8
-
Size
452KB
-
MD5
034448ca9f585ac71d8559cf67681598
-
SHA1
b23219af71cc040ec4e18d9a7fba42b74ad3fc1e
-
SHA256
7532a49037618b488c778eda56ee0b9e656acf7bed9aafb7b75278a1ef566fc8
-
SHA512
b2a48ad27d0767bc3d04fc09b9cbfef4e8953022e4f96ddf5ed119dc8b3299091ab6e30cbf3e04c47d37750840e027f26ce48323e0ef324d716a0d0c4d091018
-
SSDEEP
12288:PrumSn+v3lk3nVtcWK+exxio4NQ6X6bhHkDoeXom/f91lxIEw:PrwC32Va0oz/NHknXhT/d
Malware Config
Signatures
Files
-
7532a49037618b488c778eda56ee0b9e656acf7bed9aafb7b75278a1ef566fc8.exe windows x86
61a951a74048be5c5a6c6083584f9072
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
WriteFile
FindClose
GetProcessHeap
ClearCommBreak
CreateDirectoryA
GetModuleFileNameA
WaitForMultipleObjects
RemoveDirectoryA
GetCommandLineA
SetEndOfFile
AddAtomA
GetFileType
CreatePipe
FindAtomA
GetDriveTypeW
DeleteAtom
GetModuleHandleA
IsBadWritePtr
CloseHandle
HeapCreate
HeapFree
SetVolumeLabelA
CreateSemaphoreW
ExitThread
cryptui
WizardFree
DllRegisterServer
CryptUIDlgViewContext
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIWizImport
LocalEnroll
DllUnregisterServer
CryptUIWizDigitalSign
LocalEnrollNoDS
WizardFree
CryptUIStartCertMgr
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE