Static task
static1
Behavioral task
behavioral1
Sample
8bd3f562af3247956a8246697f7c8b7a55d33dc700d570057e31e7163729314e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8bd3f562af3247956a8246697f7c8b7a55d33dc700d570057e31e7163729314e.exe
Resource
win10v2004-20220812-en
General
-
Target
8bd3f562af3247956a8246697f7c8b7a55d33dc700d570057e31e7163729314e
-
Size
120KB
-
MD5
925eb3efbbbf4417d284cb1b46e52f70
-
SHA1
29793be94894cd733a42722557ed7555414e2de0
-
SHA256
8bd3f562af3247956a8246697f7c8b7a55d33dc700d570057e31e7163729314e
-
SHA512
ed76810020347851e6aefe0f20bf46476eb840f13b0d8b901d704a0852ad66be9b034a39f11830aa51063b730bf81acc74fdbba3d9480339c6c62c0047389c59
-
SSDEEP
3072:CVX/Hmm2hxGaKmBrf0vzYzEJeUoVTb1cKbkuxhKEnOE:UiGa/FfXzpUoNbGKwZEnh
Malware Config
Signatures
Files
-
8bd3f562af3247956a8246697f7c8b7a55d33dc700d570057e31e7163729314e.exe windows x86
9eb869aeba97a8bcba9e5eece45d3778
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CopyFileA
GetModuleHandleA
GetStdHandle
DisconnectNamedPipe
SetEvent
lstrlenW
HeapDestroy
GetPriorityClass
GetStartupInfoA
DeleteFileA
ResumeThread
GetCommandLineA
GetCurrentDirectoryA
VirtualProtect
GetProcessHeap
WriteConsoleW
lstrcpyA
WriteConsoleW
GetFileAttributesW
WriteConsoleW
CreatePipe
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIWizExport
LocalEnroll
CryptUIDlgViewContext
DllRegisterServer
WizardFree
WizardFree
CryptUIWizImport
CryptUIWizBuildCTL
CryptUIWizDigitalSign
CryptUIStartCertMgr
LocalEnroll
DllUnregisterServer
CryptUIWizBuildCTL
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE