Static task
static1
Behavioral task
behavioral1
Sample
cb0dbd961920395d63fe0bc4a1fc54aee744cd281cb1da4acd87efb934947111.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb0dbd961920395d63fe0bc4a1fc54aee744cd281cb1da4acd87efb934947111.exe
Resource
win10v2004-20220812-en
General
-
Target
cb0dbd961920395d63fe0bc4a1fc54aee744cd281cb1da4acd87efb934947111
-
Size
768KB
-
MD5
00582132afb07bc3f5335d951c096683
-
SHA1
9baec81d6e97ec6bc114e542a2fc48bbe6a55fdc
-
SHA256
cb0dbd961920395d63fe0bc4a1fc54aee744cd281cb1da4acd87efb934947111
-
SHA512
f982bf354045404cc7bd022595d3f8f51bb908d9a70fa0cd1aab83d2de3d09f73e76200b0a4fe563d29a34f835eba6d9962f93618de1e9f976e5f413bdbd7398
-
SSDEEP
12288:8l7sutpAUEhmUmqr7qyF0aPfLp1U9olrFE6CcxDeL9pcYrG9PT/ZZuCYs0o:8lHry5Pzp1iotD1STILB10o
Malware Config
Signatures
Files
-
cb0dbd961920395d63fe0bc4a1fc54aee744cd281cb1da4acd87efb934947111.exe windows x86
69edb2b508f9ecc2d4d4f80c663bcfce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
SetLastError
CreateFileA
SetLastError
RemoveDirectoryW
CreateMutexA
HeapDestroy
RemoveDirectoryW
GetFileSize
ReleaseSemaphore
DeleteFileA
LoadLibraryA
ReleaseMutex
MapViewOfFile
VirtualProtect
GetCommandLineW
lstrlenA
HeapSize
OpenEventW
GetStdHandle
ReleaseSemaphore
CreateDirectoryW
FatalExit
GetVersion
GetStartupInfoA
cryptui
LocalEnrollNoDS
DllRegisterServer
WizardFree
WizardFree
CryptUIStartCertMgr
CryptUIDlgViewContext
LocalEnroll
DllUnregisterServer
CryptUIWizDigitalSign
CryptUIWizBuildCTL
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizImport
iernonce
RunOnceExProcess
InitCallback
InitCallback
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE