Static task
static1
Behavioral task
behavioral1
Sample
1c1c1c498a45efab305d03f7eba9bdb346a41b8aa6c575f89db7a3b4060a9189.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c1c1c498a45efab305d03f7eba9bdb346a41b8aa6c575f89db7a3b4060a9189.exe
Resource
win10v2004-20220901-en
General
-
Target
1c1c1c498a45efab305d03f7eba9bdb346a41b8aa6c575f89db7a3b4060a9189
-
Size
294KB
-
MD5
9295354d2ea65f73284e26ca1ff29950
-
SHA1
b44cd204a88137d8d28189170adbb2c0ce73b70d
-
SHA256
1c1c1c498a45efab305d03f7eba9bdb346a41b8aa6c575f89db7a3b4060a9189
-
SHA512
5104255c712850dfe1e733b3b6217e02bd572063c61068df7da5fe54eff1729139423bfe09f7069f15ecbf6cbde3dc50190983333290b9eb912453af668754d5
-
SSDEEP
6144:WIneWt+asKpludSGzHwrYhhxzIFMK+wUzRqgh5ViwWs8iih:X+asKp4dSGzQ46izRlbAwWbiih
Malware Config
Signatures
Files
-
1c1c1c498a45efab305d03f7eba9bdb346a41b8aa6c575f89db7a3b4060a9189.exe windows x86
7936db3916c9637c97af9315263c7297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
lstrcpyA
DeleteFileA
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
ResumeThread
CopyFileA
WriteConsoleW
GetModuleHandleA
WriteConsoleW
GetCommandLineA
GetProcessHeap
GetStdHandle
GetCurrentDirectoryA
VirtualProtect
GetFileAttributesW
WriteConsoleW
lstrlenW
SetEvent
GetPriorityClass
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
cryptui
CryptUIWizDigitalSign
CryptUIWizExport
LocalEnroll
CryptUIWizImport
CryptUIWizBuildCTL
WizardFree
DllUnregisterServer
CryptUIDlgViewContext
WizardFree
CryptUIStartCertMgr
DllRegisterServer
LocalEnroll
CryptUIWizBuildCTL
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE