Static task
static1
Behavioral task
behavioral1
Sample
3e7af77e3c6cebd5e697fd3965265c21499cb1f404cfeaa307a63a250948f533.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e7af77e3c6cebd5e697fd3965265c21499cb1f404cfeaa307a63a250948f533.exe
Resource
win10v2004-20220812-en
General
-
Target
3e7af77e3c6cebd5e697fd3965265c21499cb1f404cfeaa307a63a250948f533
-
Size
749KB
-
MD5
193efd4275272ae8122d680b284d2d45
-
SHA1
c15e724b130e628f0a8a2425c9d6af8e8d59ea9a
-
SHA256
3e7af77e3c6cebd5e697fd3965265c21499cb1f404cfeaa307a63a250948f533
-
SHA512
8448caa2a68b46340af590dd9dcf7319735b002d9b4d3f48845fd4beb794ac60b08d64d73987409ebfb51fdc401482e650d46564adf6cb1b52344c483e66b973
-
SSDEEP
12288:aehk8Dxzl7+LD28Qg8VROp+meTocMBRHpAHGHw4jk2dO55N3f3AqHJNu8ueO2eLe:aehk8lI/vBU7ZTo/fH2H2N7dmVYqpQ5Y
Malware Config
Signatures
Files
-
3e7af77e3c6cebd5e697fd3965265c21499cb1f404cfeaa307a63a250948f533.exe windows x86
c191ea181e3b050e01e54666e75b37f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
RemoveDirectoryA
SetEndOfFile
GetFileType
CloseHandle
ClearCommBreak
FindAtomA
HeapFree
IsBadWritePtr
GetDriveTypeW
ExitThread
RemoveDirectoryA
AddAtomA
CreateSemaphoreW
CreatePipe
SetVolumeLabelA
HeapCreate
GetModuleFileNameA
WriteFile
DeleteAtom
WaitForMultipleObjects
GetProcessHeap
CreateDirectoryA
GetCommandLineA
FindClose
cryptui
DllUnregisterServer
LocalEnroll
CryptUIDlgFreeCAContext
CryptUIWizDigitalSign
CryptUIWizImport
DllRegisterServer
LocalEnrollNoDS
WizardFree
CryptUIWizExport
WizardFree
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE