Static task
static1
Behavioral task
behavioral1
Sample
c734b3a6552278b2afafa8a168e6aa723c6a9d61cf84612bf7c5de8cfa49bad9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c734b3a6552278b2afafa8a168e6aa723c6a9d61cf84612bf7c5de8cfa49bad9.exe
Resource
win10v2004-20220812-en
General
-
Target
c734b3a6552278b2afafa8a168e6aa723c6a9d61cf84612bf7c5de8cfa49bad9
-
Size
111KB
-
MD5
48cf008abae0c10714c3584315ac2f00
-
SHA1
8ad73441cefd8b4bc722e285ec29bb5b1c0fab08
-
SHA256
c734b3a6552278b2afafa8a168e6aa723c6a9d61cf84612bf7c5de8cfa49bad9
-
SHA512
e918b8da289f738046d1ada4e61f78477fd61b75fff34a34c0863caedfa600d1085c2ad73611c5e0ce243c1bf038bd0ab6824a8f62b298fd47f5e98983b8b1b0
-
SSDEEP
1536:9mXRLWOFEjH7kkm/kxCuWdvVSJYReEbS54GMhuamyUBWKg8dlmmBAPpc8Sy2if/:9YEvkkVxCacjwamF0OurSwC5xvfZ
Malware Config
Signatures
Files
-
c734b3a6552278b2afafa8a168e6aa723c6a9d61cf84612bf7c5de8cfa49bad9.exe windows x86
63381ff63e78b1b3e0ff87cf00e46851
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualQueryEx
GetCommandLineA
DeleteFileA
lstrlenW
WriteConsoleW
lstrcpyA
Sleep
GetPrivateProfileSectionW
HeapDestroy
VirtualProtect
GetStdHandle
GetFileAttributesA
WriteConsoleW
CopyFileA
GetProcessHeap
GetDriveTypeW
WriteConsoleW
GetModuleHandleA
CancelIo
GetStartupInfoA
SetEvent
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
cryptui
CryptUIWizBuildCTL
LocalEnroll
LocalEnroll
LocalEnrollNoDS
CryptUIWizImport
DllUnregisterServer
WizardFree
CryptUIWizDigitalSign
DllRegisterServer
CryptUIStartCertMgr
CryptUIDlgViewContext
WizardFree
CryptUIWizExport
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ