Static task
static1
Behavioral task
behavioral1
Sample
b18569ef12935cb4ab1467927847f0b4294b431c226a67daba04de94ecc5ad63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b18569ef12935cb4ab1467927847f0b4294b431c226a67daba04de94ecc5ad63.exe
Resource
win10v2004-20220812-en
General
-
Target
b18569ef12935cb4ab1467927847f0b4294b431c226a67daba04de94ecc5ad63
-
Size
69KB
-
MD5
6b27dda9ea1f5070ffe8db5b4c9c13a4
-
SHA1
c2e019e561bbeb425b944fa0728fda7ab05e632e
-
SHA256
b18569ef12935cb4ab1467927847f0b4294b431c226a67daba04de94ecc5ad63
-
SHA512
86d7d2d4f2d623159ae88234198a50fb3d865cc0ef3bba66c438c9fd8cbef59374e11b63ab5d2d1edf177da6eaf813312801caab18701cd7c59cd5f1879be93c
-
SSDEEP
1536:fsbZJyAeAotPGupnIW0/EbV29DKSGuoM0a2OfvU/payh:fsbZJMrtOupB0/EbV2xzG302svU/p
Malware Config
Signatures
Files
-
b18569ef12935cb4ab1467927847f0b4294b431c226a67daba04de94ecc5ad63.exe windows x86
d5bf43862f7046f4eba5dd62cc21e187
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreatePipe
VirtualQueryEx
GetProcessHeap
ResumeThread
SetEvent
GetFileAttributesW
GetStdHandle
WriteConsoleW
WriteConsoleW
GetModuleHandleA
lstrlenW
GetPriorityClass
VirtualProtect
CopyFileA
lstrcpyA
HeapDestroy
GetCommandLineA
GetStartupInfoA
WriteConsoleW
DisconnectNamedPipe
DeleteFileA
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
cryptui
CryptUIWizDigitalSign
DllUnregisterServer
LocalEnrollNoDS
WizardFree
CryptUIWizExport
CryptUIWizImport
LocalEnroll
CryptUIWizBuildCTL
DllRegisterServer
WizardFree
CryptUIDlgViewContext
CryptUIStartCertMgr
LocalEnroll
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.impdata Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ