Static task
static1
Behavioral task
behavioral1
Sample
0714460e7c124b6b7a64863d32844c42c0f5b8f3c6cf83603718189101f3c8b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0714460e7c124b6b7a64863d32844c42c0f5b8f3c6cf83603718189101f3c8b0.exe
Resource
win10v2004-20220812-en
General
-
Target
0714460e7c124b6b7a64863d32844c42c0f5b8f3c6cf83603718189101f3c8b0
-
Size
115KB
-
MD5
6732dbd70257f000a08330a75e20c340
-
SHA1
968adf8a974789beeab44f6eda7444f1795f028b
-
SHA256
0714460e7c124b6b7a64863d32844c42c0f5b8f3c6cf83603718189101f3c8b0
-
SHA512
630dd661a5a578799a4623720e28b925018015b1788b020a7466c9a30b39893fe3c68c573d6a961d6f2a52b40634599fbaec9b3e7fb12ac06e65cd43f17c11f1
-
SSDEEP
3072:nBNkND9ctvpnHwCdjOqjPki6oLELrHZolIQV:nBN6D9ctRnH/aqrki6oLELj2Iw
Malware Config
Signatures
Files
-
0714460e7c124b6b7a64863d32844c42c0f5b8f3c6cf83603718189101f3c8b0.exe windows x86
7de7dbaf9e601a53bfca698b45431f7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
GetPrivateProfileSectionW
lstrcpyA
WriteConsoleW
GetFileAttributesW
lstrlenW
WriteConsoleW
GetModuleHandleA
SetEvent
GetProcessHeap
Sleep
GetStartupInfoA
HeapDestroy
CancelIo
GetStdHandle
DeleteFileA
VirtualQueryEx
VirtualProtect
CopyFileA
GetCommandLineA
GetDriveTypeW
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
cryptui
WizardFree
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizImport
CryptUIDlgViewContext
LocalEnroll
DllRegisterServer
DllUnregisterServer
LocalEnroll
CryptUIWizDigitalSign
CryptUIStartCertMgr
CryptUIWizBuildCTL
WizardFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 765KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ