Static task
static1
Behavioral task
behavioral1
Sample
1032e42845fa51f870ca8125d7d46e320c631b5a68d0efb29efdd30ed3176f32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1032e42845fa51f870ca8125d7d46e320c631b5a68d0efb29efdd30ed3176f32.exe
Resource
win10v2004-20220812-en
General
-
Target
1032e42845fa51f870ca8125d7d46e320c631b5a68d0efb29efdd30ed3176f32
-
Size
294KB
-
MD5
a3b9a503d837fed67293ae68c3e26090
-
SHA1
76144ff832c85f41b45ce0f168b3dfb6dc64b5fa
-
SHA256
1032e42845fa51f870ca8125d7d46e320c631b5a68d0efb29efdd30ed3176f32
-
SHA512
3ad3a27cba4e48d5b17276722cda3c1c4a942d53e5cfdd7fea05dceeef347cf444a80cf19b4fdcdba7414226febcd99c37e3621612073b27de93b0fbfdaa38be
-
SSDEEP
6144:Q142dMBPko2DjpNGZxyaGf78IM1x2DbOPy4trzTtXzLgpnW/Qch:Q1jdEsNDjD8vK8I+xobOPy4tB3gpWph
Malware Config
Signatures
Files
-
1032e42845fa51f870ca8125d7d46e320c631b5a68d0efb29efdd30ed3176f32.exe windows x86
521b2e2eea0f12d1fb3e0c0c684c9d04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
lstrlenW
CopyFileA
CreatePipe
WriteConsoleW
VirtualProtect
GetCommandLineA
GetProcessHeap
GetPriorityClass
GetCurrentDirectoryA
HeapDestroy
GetFileAttributesW
WriteConsoleW
ResumeThread
GetStdHandle
DeleteFileA
WriteConsoleW
lstrcpyA
DisconnectNamedPipe
GetStartupInfoA
GetModuleHandleA
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
cryptui
LocalEnroll
CryptUIDlgViewContext
CryptUIWizExport
CryptUIWizImport
CryptUIStartCertMgr
LocalEnroll
DllRegisterServer
WizardFree
WizardFree
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIWizBuildCTL
CryptUIWizDigitalSign
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE