Static task
static1
Behavioral task
behavioral1
Sample
48347114e698b90ca31b54e6f4e78377036c0000ea076aac933b8604722925e1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
48347114e698b90ca31b54e6f4e78377036c0000ea076aac933b8604722925e1.exe
Resource
win10v2004-20220812-en
General
-
Target
48347114e698b90ca31b54e6f4e78377036c0000ea076aac933b8604722925e1
-
Size
452KB
-
MD5
76cbdfa3fb9ca2d0ad4d2fe526b75020
-
SHA1
630398d7599c84bf50b29f13a77b5e59a6ba1087
-
SHA256
48347114e698b90ca31b54e6f4e78377036c0000ea076aac933b8604722925e1
-
SHA512
6c2113aba9ffe09b82e57dbc05d5f4fa887748d9edb3e06a42181371c9859e7a59f03c48af5116fe2f2e38e1148be558bd5df8247f6419f422e9a27777a400d1
-
SSDEEP
6144:V1oooHYsYe6Gwn2SJWYy9x8pn9YANf4utiOAKDIqnQHSavyHsaN3z9y+zxbvG+6h:V1OHYsheyD8pn9MMXcqQH+59/LWU
Malware Config
Signatures
Files
-
48347114e698b90ca31b54e6f4e78377036c0000ea076aac933b8604722925e1.exe windows x86
798430c805dd11078d17eeb1aa5a083c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
VirtualProtectEx
GetLastError
CreateDirectoryW
RemoveDirectoryA
CreateFileA
CreateFileMappingW
lstrlenA
RemoveDirectoryA
HeapFree
ReleaseMutex
SetStdHandle
Sleep
GetCommandLineA
DeleteFileA
WriteFile
FindClose
WriteConsoleW
GetFileType
FindClose
CancelIo
GetModuleHandleA
CreateMailslotW
CreateEventW
ResetEvent
cryptui
CryptUIWizExport
CryptUIDlgFreeCAContext
LocalEnroll
CryptUIWizBuildCTL
WizardFree
WizardFree
CryptUIWizImport
LocalEnrollNoDS
CryptUIDlgViewContext
CryptUIStartCertMgr
DllUnregisterServer
CryptUIWizDigitalSign
DllRegisterServer
dbnmpntw
ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 443KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ