Static task
static1
Behavioral task
behavioral1
Sample
f2c904129fe7cd05ee0a4ead77e6609f912a90c82c0762cb326f84f28522c8f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2c904129fe7cd05ee0a4ead77e6609f912a90c82c0762cb326f84f28522c8f5.exe
Resource
win10v2004-20220812-en
General
-
Target
f2c904129fe7cd05ee0a4ead77e6609f912a90c82c0762cb326f84f28522c8f5
-
Size
112KB
-
MD5
901753d2f6fc77facdc42fa5eeef2b10
-
SHA1
fa1f197f10c313d5681bfd03afcdcfebf3c3a26c
-
SHA256
f2c904129fe7cd05ee0a4ead77e6609f912a90c82c0762cb326f84f28522c8f5
-
SHA512
930cbc1be6d00af1ba9eb8f592b53c0aa694aa5da67d5f669c6c602029e73b8114d98ab3c5478f4dffd359ad625de44f616baf1c6a048f30fe446d7dbaa73b4f
-
SSDEEP
3072:PxvyjbH+4WWoU1mwBIFzFTaIr6n7WtLut2au:pavvWbgmwyaP7ILu
Malware Config
Signatures
Files
-
f2c904129fe7cd05ee0a4ead77e6609f912a90c82c0762cb326f84f28522c8f5.exe windows x86
9e941b5baeba41735d3c2293dad3ed5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
CopyFileA
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
HeapDestroy
SetEvent
VirtualQueryEx
VirtualProtect
GetProcessHeap
WriteConsoleW
GetPriorityClass
WriteConsoleW
lstrlenW
WriteConsoleW
CreatePipe
ResumeThread
DeleteFileA
DisconnectNamedPipe
lstrcpyA
GetStdHandle
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
LocalEnroll
CryptUIDlgViewContext
CryptUIStartCertMgr
DllRegisterServer
DllUnregisterServer
CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnrollNoDS
LocalEnroll
WizardFree
CryptUIWizImport
WizardFree
CryptUIWizExport
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.impdata Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ