Static task
static1
Behavioral task
behavioral1
Sample
7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a.exe
Resource
win10v2004-20220901-en
General
-
Target
7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a
-
Size
119KB
-
MD5
51838a56779b344b7cf545d2e09851c0
-
SHA1
ac1867738688b4d8f7f5c91d74496581679af645
-
SHA256
7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a
-
SHA512
d17d05c1e411de9d542ee8df585c4ee830a2855c5873df8078cf08464885824474e08a9b4415431d9444b6de47cb6c243d5f92ac2702ca1630fbf520395d4867
-
SSDEEP
3072:FR5J6u30H1HPQpoXpZnEjyyIe9L9fEKx+HCzPLT1x:R8u30pPQcZniL9fqytx
Malware Config
Signatures
Files
-
7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a.exe windows x86
ad44578c4cf96d7a45af0557771cd13f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
VirtualQueryEx
CopyFileA
lstrlenW
GetPriorityClass
DisconnectNamedPipe
GetFileAttributesW
lstrcpyA
GetModuleHandleA
DeleteFileA
GetCommandLineA
VirtualProtect
WriteConsoleW
ResumeThread
CreatePipe
HeapDestroy
GetStartupInfoA
GetProcessHeap
SetEvent
WriteConsoleW
WriteConsoleW
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer
cryptui
LocalEnrollNoDS
CryptUIWizExport
CryptUIStartCertMgr
CryptUIWizDigitalSign
WizardFree
CryptUIWizBuildCTL
CryptUIDlgViewContext
LocalEnroll
CryptUIWizImport
DllUnregisterServer
DllRegisterServer
WizardFree
LocalEnroll
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ