Static task
static1
Behavioral task
behavioral1
Sample
406ebb5002bdfbe23a557c7b13c3a9eca301851f7a895c4c4a2625d01efb564b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
406ebb5002bdfbe23a557c7b13c3a9eca301851f7a895c4c4a2625d01efb564b.exe
Resource
win10v2004-20220901-en
General
-
Target
406ebb5002bdfbe23a557c7b13c3a9eca301851f7a895c4c4a2625d01efb564b
-
Size
747KB
-
MD5
0bc2ab7e1a6cdf60f497ff12d5239baf
-
SHA1
58a8c4ccf0e442bdaa6eace3eecd0fb830d7bf81
-
SHA256
406ebb5002bdfbe23a557c7b13c3a9eca301851f7a895c4c4a2625d01efb564b
-
SHA512
75bbbee8efc929a5485a4d3adf6516ea6d0e7a5438683b28b323cd56cc34591861ed69a3ebf3298989c55b31ae6f81c6164b936b70fc7a9c968df05a0f87edac
-
SSDEEP
12288:cNCuWZXMe8zIeJSduHOhvCToUYbLiWbRZ1OoV61bYPtmpl20pTkB:cAV8zIew+IPUYbLFT1dUNYPIlT
Malware Config
Signatures
Files
-
406ebb5002bdfbe23a557c7b13c3a9eca301851f7a895c4c4a2625d01efb564b.exe windows x86
ea7c60eb8e0682c3149e7106506dffbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
IsBadWritePtr
FindClose
CreatePipe
GetFileType
GetFileAttributesW
GlobalSize
GetCurrentThreadId
CreateDirectoryA
WaitForMultipleObjects
GetModuleHandleA
GetModuleFileNameA
HeapFree
Beep
ClearCommBreak
HeapCreate
WriteFile
GetStdHandle
lstrlenW
GetStdHandle
FatalExit
GetCommandLineA
CloseHandle
GetCurrentDirectoryW
GetDriveTypeW
cryptui
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
DllRegisterServer
LocalEnroll
CryptUIWizBuildCTL
WizardFree
DllUnregisterServer
CryptUIWizDigitalSign
CryptUIStartCertMgr
CryptUIWizImport
CryptUIWizExport
LocalEnrollNoDS
WizardFree
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 828KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktgohih Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE