Static task
static1
Behavioral task
behavioral1
Sample
e9a42ec66d8c47cfebaa0ed45013d0c6c146fb29b6d2eb7a81ff97d38e870f19.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9a42ec66d8c47cfebaa0ed45013d0c6c146fb29b6d2eb7a81ff97d38e870f19.exe
Resource
win10v2004-20220901-en
General
-
Target
e9a42ec66d8c47cfebaa0ed45013d0c6c146fb29b6d2eb7a81ff97d38e870f19
-
Size
292KB
-
MD5
62b21bc6e774719e523ca47e73e900e0
-
SHA1
f49273c9614f8cbb346a50893c23855582f3bb1b
-
SHA256
e9a42ec66d8c47cfebaa0ed45013d0c6c146fb29b6d2eb7a81ff97d38e870f19
-
SHA512
3746e1f7479c3006f899a7626ad03a1f9057fe039bf760c4dcacd476f6d2a203bc56e7ecba56df01ba6287be972bb60ce42306c6f31aa0121b34d0e890db9581
-
SSDEEP
6144:oQe2+6SuTh9b9OzQUPZm3xdKupyZs27Osr8uQF44lcQ:oQH+cH5OzJPZsjKh8RH
Malware Config
Signatures
Files
-
e9a42ec66d8c47cfebaa0ed45013d0c6c146fb29b6d2eb7a81ff97d38e870f19.exe windows x86
415002ce2b64ffa4451197094413ecdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetStdHandle
SetEvent
ResumeThread
VirtualProtect
GetModuleHandleA
GetStartupInfoA
VirtualQueryEx
Sleep
GetFileAttributesW
WriteConsoleW
DeleteFileA
HeapDestroy
GetDriveTypeW
lstrlenW
WriteConsoleW
WriteConsoleW
CopyFileA
lstrcpyA
GetCommandLineA
GetPrivateProfileSectionW
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer
cryptui
DllRegisterServer
WizardFree
WizardFree
CryptUIWizExport
CryptUIStartCertMgr
CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnroll
DllUnregisterServer
CryptUIWizImport
LocalEnroll
LocalEnrollNoDS
CryptUIDlgViewContext
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.expimp Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ