Static task
static1
Behavioral task
behavioral1
Sample
62b94b9dbd377914ad12baad3935a054456aa988ec8a9e15ddbb7bf75f49097b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
62b94b9dbd377914ad12baad3935a054456aa988ec8a9e15ddbb7bf75f49097b.exe
Resource
win10v2004-20220812-en
General
-
Target
62b94b9dbd377914ad12baad3935a054456aa988ec8a9e15ddbb7bf75f49097b
-
Size
18KB
-
MD5
6adeba1f8e6d905c13b77e1b3d0c3f70
-
SHA1
ef807730896f8f3ddece78b0b00756826e2a6cd2
-
SHA256
62b94b9dbd377914ad12baad3935a054456aa988ec8a9e15ddbb7bf75f49097b
-
SHA512
9af7f20b616f54223424f3708ff6ef3c71dc5ec2ad11fd0b6fca1eecf60fe4901a452f6273d0b1048e082f47fd7418c09485ee96fc145ecd84162a74ff5ba0ca
-
SSDEEP
192:YbM3d2IIkglJ0weEixntDYU3qdvc1gu9I9pW2hOKyzswN2pjyluyokOQf:Y02IWeEixnt73qW1yW2PyzPUqO
Malware Config
Signatures
Files
-
62b94b9dbd377914ad12baad3935a054456aa988ec8a9e15ddbb7bf75f49097b.exe windows x86
451ead48d5ca0f57ba4c80c437a6dac7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
GetCommandLineA
CreatePipe
GetStdHandle
WriteConsoleW
GetModuleHandleA
WriteConsoleW
CopyFileA
HeapDestroy
GetProcessHeap
GetPriorityClass
DeleteFileA
DisconnectNamedPipe
WriteConsoleW
GetCurrentDirectoryA
SetEvent
VirtualProtect
lstrcpyA
GetStartupInfoA
ResumeThread
lstrlenW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
DllGetClassObject
cryptui
LocalEnroll
LocalEnroll
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIWizExport
WizardFree
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIWizBuildCTL
DllRegisterServer
DllUnregisterServer
WizardFree
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE