Static task
static1
Behavioral task
behavioral1
Sample
6ce2d94f890424b7d6678dfebd51bdcc2c3ebbdb6392429303d848c10bc9f354.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ce2d94f890424b7d6678dfebd51bdcc2c3ebbdb6392429303d848c10bc9f354.exe
Resource
win10v2004-20220812-en
General
-
Target
6ce2d94f890424b7d6678dfebd51bdcc2c3ebbdb6392429303d848c10bc9f354
-
Size
294KB
-
MD5
2239e63fe6b1905775bc1fb416133246
-
SHA1
f71cd1d077f589619260f4552d8bf04a9c02d90a
-
SHA256
6ce2d94f890424b7d6678dfebd51bdcc2c3ebbdb6392429303d848c10bc9f354
-
SHA512
50afef543cbc8eb3b9b25b4a57706e04cdaea1e08d1c025d2f8fe09a8258b072833101b764908dc9d012289ae4f886c3fe866a71770151f750edd00bdd290c43
-
SSDEEP
6144:1jL2dMBPk4s8PkgAfEiRZQq/hwTClmL8duR9Db7xsIZze3qrtfRh:Z6dEs4xPApFwTCl20u1dlDh
Malware Config
Signatures
Files
-
6ce2d94f890424b7d6678dfebd51bdcc2c3ebbdb6392429303d848c10bc9f354.exe windows x86
ed36cecd726ef25838809163019cd42f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CopyFileA
DisconnectNamedPipe
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
WriteConsoleW
SetEvent
WriteConsoleW
GetPriorityClass
VirtualProtect
GetStdHandle
DeleteFileA
WriteConsoleW
HeapDestroy
GetCommandLineA
GetFileAttributesW
lstrcpyA
GetProcessHeap
lstrlenW
CreatePipe
ResumeThread
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
cryptui
CryptUIStartCertMgr
CryptUIWizDigitalSign
CryptUIWizBuildCTL
WizardFree
CryptUIDlgViewContext
LocalEnroll
DllUnregisterServer
CryptUIWizBuildCTL
LocalEnroll
CryptUIWizImport
DllRegisterServer
CryptUIWizExport
WizardFree
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE