Static task
static1
Behavioral task
behavioral1
Sample
d0f073711945d2ca0d3b6b8f62a7ecadb28d385a5136203673cfde02784f85c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0f073711945d2ca0d3b6b8f62a7ecadb28d385a5136203673cfde02784f85c9.exe
Resource
win10v2004-20220812-en
General
-
Target
d0f073711945d2ca0d3b6b8f62a7ecadb28d385a5136203673cfde02784f85c9
-
Size
164KB
-
MD5
7464465e789cb80db9a23d9789250096
-
SHA1
48b040f62cc3d21d2da2ad552c51e25fa9874367
-
SHA256
d0f073711945d2ca0d3b6b8f62a7ecadb28d385a5136203673cfde02784f85c9
-
SHA512
fda1f9b00217aa4bbff07d47cbe5792a7efcc80644097ba15e717b99d07d0ef395b98fc52b64b93121449d3fb8ce878edff7ab52a65bca3b13326e1914359554
-
SSDEEP
3072:nlYvNExjygoiWCFzULN3W1TCTB3TdVk5TtMhkZcisRZrbVP6UhqiWKuvMIZZS4:nMKQgNWCFqFITC9jf2TtMy/YdCZKqZQ4
Malware Config
Signatures
Files
-
d0f073711945d2ca0d3b6b8f62a7ecadb28d385a5136203673cfde02784f85c9.exe windows x86
a7eaa11e52a460583dce7c19a3b4d66b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
nss3
PK11_ProtectedAuthenticationPath
PK11_GetTokenName
PORT_Strdup
PK11_SetPasswordFunc
NSS_Init
NSS_NoDB_Init
PK11_GetBestSlot
PK11_PQG_ParamGen
PK11_GenerateKeyPair
PK11_CreateDigestContext
PK11_DigestOp
PK11_DigestFinal
PK11_Sign
PK11_DestroyContext
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
PK11_FreeSlot
NSS_Shutdown
PORT_GetError
PORT_Alloc
plc4
PL_strdup
PL_strrchr
PL_CreateOptState
PL_GetNextOpt
nspr4
PR_OpenFile
PR_GetEnv
PR_Open
PR_Cleanup
PR_Read
PR_Close
PR_Write
PR_GetSpecialFD
PR_fprintf
msvcr70
_getch
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
fgets
vfprintf
sprintf
printf
fflush
exit
_iob
fprintf
strncmp
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
__p__fmode
kernel32
GetModuleHandleA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE