Static task
static1
Behavioral task
behavioral1
Sample
aaa8bb61462052e2a5373409457df9f47a0d9ae6e196684122bef6bf78e6a5ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaa8bb61462052e2a5373409457df9f47a0d9ae6e196684122bef6bf78e6a5ae.exe
Resource
win10v2004-20220901-en
General
-
Target
aaa8bb61462052e2a5373409457df9f47a0d9ae6e196684122bef6bf78e6a5ae
-
Size
68KB
-
MD5
3f6c996d736d4a6f23415e1257f3c452
-
SHA1
b9be20d70fd9c8f53efe01d0fe841eedaab2b635
-
SHA256
aaa8bb61462052e2a5373409457df9f47a0d9ae6e196684122bef6bf78e6a5ae
-
SHA512
d1405db180cd80a7f4da8f2f41c3ebd3c425d764299659e6d6ed16efbb742b1fbf72c779e610fedfa52e2d1f69a90465935d8c0016f991dd2f474f6bc14fa15e
-
SSDEEP
1536:lMCNYYzOtqfwAob85v+lIibwazOLu4h+A3h:wYzOiTob8w9wDJh
Malware Config
Signatures
Files
-
aaa8bb61462052e2a5373409457df9f47a0d9ae6e196684122bef6bf78e6a5ae.exe windows x86
79f7d23f7103318d58cb390af2de1eaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResumeThread
VirtualProtect
CreatePipe
GetStartupInfoA
VirtualQueryEx
WriteConsoleW
GetCommandLineA
lstrcpyA
DeleteFileA
WriteConsoleW
GetModuleHandleA
GetProcessHeap
SetEvent
WriteConsoleW
DisconnectNamedPipe
HeapDestroy
GetPriorityClass
GetFileAttributesW
GetStdHandle
CopyFileA
lstrlenW
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
cryptui
LocalEnrollNoDS
WizardFree
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIStartCertMgr
DllUnregisterServer
CryptUIWizBuildCTL
LocalEnroll
DllRegisterServer
CryptUIWizImport
LocalEnroll
WizardFree
CryptUIWizExport
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ