Static task
static1
Behavioral task
behavioral1
Sample
1000eaf0e64745793c47d14b9ac153f504ccc55796c61a1255b69dd3b619b470.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1000eaf0e64745793c47d14b9ac153f504ccc55796c61a1255b69dd3b619b470.exe
Resource
win10v2004-20220812-en
General
-
Target
1000eaf0e64745793c47d14b9ac153f504ccc55796c61a1255b69dd3b619b470
-
Size
245KB
-
MD5
44587083dae6920093a98eee45c40840
-
SHA1
6ab001f6ec06ee0b8ae357bf5221a73a9352bd5f
-
SHA256
1000eaf0e64745793c47d14b9ac153f504ccc55796c61a1255b69dd3b619b470
-
SHA512
2ad18b2ef151dbd9f1101278229e0d9aec2b7984959f66a92123eff802fafdb27179c3a3872dcee36132d6e2d67864a4ff235c60ddd75d1579bd2cb963432dc1
-
SSDEEP
3072:Rt+i4RdCUQe9ms3EYUUPFGb9NZFV22v4IVLhJPuz30W35WtnVaDaGzfYGavFTZMA:RAoDe4s9jEbDZn2O4IRmAWUJMjATKAbv
Malware Config
Signatures
Files
-
1000eaf0e64745793c47d14b9ac153f504ccc55796c61a1255b69dd3b619b470.exe windows x86
3e6c1ba8ef126dfd3e7a449808f5f1ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
ClearCommBreak
GetCommandLineA
AddAtomA
FindClose
FatalExit
HeapCreate
CreateDirectoryA
HeapFree
FindAtomA
GetDriveTypeW
WriteFile
CloseHandle
GetCurrentDirectoryW
RemoveDirectoryA
WaitForMultipleObjects
CreateSemaphoreA
RemoveDirectoryA
GetCurrentThreadId
SetVolumeLabelA
GetFileType
CreatePipe
DeleteAtom
GetModuleHandleA
GetModuleFileNameA
cryptui
DllUnregisterServer
LocalEnroll
LocalEnrollNoDS
CryptUIDlgViewContext
CryptUIWizImport
CryptUIStartCertMgr
WizardFree
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllRegisterServer
WizardFree
CryptUIWizDigitalSign
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE