Static task
static1
Behavioral task
behavioral1
Sample
48281c6b351842aaedc73a15866a16954f950a22b914b07173532c888101417a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48281c6b351842aaedc73a15866a16954f950a22b914b07173532c888101417a.exe
Resource
win10v2004-20220812-en
General
-
Target
48281c6b351842aaedc73a15866a16954f950a22b914b07173532c888101417a
-
Size
298KB
-
MD5
839999233f4621e8a95267c07d8a2a20
-
SHA1
28efef1a635a69fa79c4ca4e9844041cfb2c363d
-
SHA256
48281c6b351842aaedc73a15866a16954f950a22b914b07173532c888101417a
-
SHA512
916128605bd4e1c223d2c94c8295d422a6f23bfb45438a32cf6c047156a737530118112a62c270d435c06bf8855f47b9571d1ec7667e33801df184bc1cff506f
-
SSDEEP
6144:EdMMZmi9ln+v3lk30Qq0tfEW+whY1yAPWK+exxio44fcZJYnl:BumSn+v3lk3nVtcWK+exxio4N4
Malware Config
Signatures
Files
-
48281c6b351842aaedc73a15866a16954f950a22b914b07173532c888101417a.exe windows x86
89b4b7aa43c9c9e2f70dd3463e3d18eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
RemoveDirectoryA
ClearCommBreak
FindClose
WaitForMultipleObjects
SetVolumeLabelA
WriteFile
GetDriveTypeW
GetProcessHeap
GetCommandLineA
HeapFree
AddAtomA
IsBadWritePtr
HeapCreate
GetModuleHandleA
GetFileType
FindAtomA
CreateDirectoryA
ExitThread
SetEndOfFile
CreatePipe
RemoveDirectoryA
CreateSemaphoreW
GetModuleFileNameA
CloseHandle
cryptui
WizardFree
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
DllUnregisterServer
CryptUIWizExport
LocalEnroll
WizardFree
CryptUIWizImport
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIStartCertMgr
DllRegisterServer
CryptUIWizBuildCTL
msrle32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE