Static task
static1
Behavioral task
behavioral1
Sample
389fe32a0535c676ec49beac5fc0a8020f004de47f5db4b04dcf76f6852de0b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
389fe32a0535c676ec49beac5fc0a8020f004de47f5db4b04dcf76f6852de0b6.exe
Resource
win10v2004-20220812-en
General
-
Target
389fe32a0535c676ec49beac5fc0a8020f004de47f5db4b04dcf76f6852de0b6
-
Size
118KB
-
MD5
10765774097d98ce1022a57e8e117cb0
-
SHA1
01c444d8a1fb28a5487e749f4045f4a194ddcc1f
-
SHA256
389fe32a0535c676ec49beac5fc0a8020f004de47f5db4b04dcf76f6852de0b6
-
SHA512
1e0db996b1b4e53b82f004c50efdb5efea519bccf4ccb6f6e6f7e211893699695d30592649685cc51ac2d3f3ebd379a5a8bc80b29c561edca9bca5e6723e980f
-
SSDEEP
3072:mtTNXJnOxxsHC3rBJRFEXeaV9AjFCRbIq6:oZixD3rBPO3Qq
Malware Config
Signatures
Files
-
389fe32a0535c676ec49beac5fc0a8020f004de47f5db4b04dcf76f6852de0b6.exe windows x86
4022e457c0246d68fd592bc61cc261aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
ResumeThread
GetDriveTypeW
SetEvent
VirtualProtect
Sleep
CopyFileA
GetProcessHeap
GetPrivateProfileSectionW
WriteConsoleW
GetFileAttributesW
DeleteFileA
GetStartupInfoA
lstrcpyA
GetModuleHandleA
WriteConsoleW
WriteConsoleW
HeapDestroy
GetCommandLineA
VirtualQueryEx
lstrlenW
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
cryptui
CryptUIStartCertMgr
CryptUIWizDigitalSign
LocalEnroll
CryptUIWizBuildCTL
DllRegisterServer
CryptUIWizExport
CryptUIWizImport
DllUnregisterServer
WizardFree
CryptUIDlgViewContext
WizardFree
LocalEnroll
LocalEnrollNoDS
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.expimp Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ