Static task
static1
Behavioral task
behavioral1
Sample
6a935e36cb2cce88d162d405afca24d59f16acbe0a059a2d2ced9343ad59c56a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a935e36cb2cce88d162d405afca24d59f16acbe0a059a2d2ced9343ad59c56a.exe
Resource
win10v2004-20220812-en
General
-
Target
6a935e36cb2cce88d162d405afca24d59f16acbe0a059a2d2ced9343ad59c56a
-
Size
769KB
-
MD5
133b55ebd2f152773f8034a4e52366fc
-
SHA1
022520fa1bef2d920cb890ac66753d8e8a8ad296
-
SHA256
6a935e36cb2cce88d162d405afca24d59f16acbe0a059a2d2ced9343ad59c56a
-
SHA512
bfca84585cd6deba490402dc213682ae3a09df68330228c37a9b56d6c856bc0304cc1f5175820a3a9803f0137c17b02da0a11a582d58a069035fe11eee75bf6e
-
SSDEEP
24576:iQ/sKE0BYrJ1srbgOe/hLop4Gz5N8ty3P7b0:ihKBw1sngOILoKoN8U3P7b
Malware Config
Signatures
Files
-
6a935e36cb2cce88d162d405afca24d59f16acbe0a059a2d2ced9343ad59c56a.exe windows x86
13c918f5059500fd8cfc1f40696bbf72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
RemoveDirectoryW
GetStdHandle
SetLastError
VirtualProtect
FatalExit
ReleaseSemaphore
ReleaseMutex
GetVersion
GetStartupInfoA
ReleaseSemaphore
lstrlenW
GetFileSize
MapViewOfFile
SetLastError
HeapDestroy
CreateDirectoryW
RemoveDirectoryW
LoadLibraryA
GetCommandLineW
CreateFileMappingW
DeleteFileA
HeapSize
CreateMutexA
CreateFileA
cryptui
WizardFree
CryptUIWizExport
CryptUIWizDigitalSign
DllRegisterServer
CryptUIWizImport
CryptUIWizBuildCTL
LocalEnroll
CryptUIDlgFreeCAContext
LocalEnrollNoDS
DllUnregisterServer
CryptUIStartCertMgr
WizardFree
CryptUIDlgViewContext
iernonce
InitCallback
InitCallback
RunOnceExProcess
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE