Static task
static1
Behavioral task
behavioral1
Sample
6746a694e1d7ae5c728d310d454478b43a97ab06bcdebf00c122b41bddd627d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6746a694e1d7ae5c728d310d454478b43a97ab06bcdebf00c122b41bddd627d6.exe
Resource
win10v2004-20220812-en
General
-
Target
6746a694e1d7ae5c728d310d454478b43a97ab06bcdebf00c122b41bddd627d6
-
Size
118KB
-
MD5
27fe461aaadc9432b715efffcee37570
-
SHA1
cd77c5469a4ce510faa29a014d4472c1bcd5aaef
-
SHA256
6746a694e1d7ae5c728d310d454478b43a97ab06bcdebf00c122b41bddd627d6
-
SHA512
54d03dfc7b87015ea4bd5788bf33aba9da6b43207e11c72c892b174ca2a54a4eedf9f5e680435d61765b1c118cef2d549f460df2111f6a16e6f140f7102d3215
-
SSDEEP
3072:mi3ZMFYVSiykS0+jdszOw9xMmK/zrqygU3eh:32YMizV+WawYmKLr7X3
Malware Config
Signatures
Files
-
6746a694e1d7ae5c728d310d454478b43a97ab06bcdebf00c122b41bddd627d6.exe windows x86
88c31497e4c0bac01eeb97bac287a1be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
GetDriveTypeW
lstrlenW
WriteConsoleW
GetFileAttributesW
GetStdHandle
GetModuleHandleA
GetPrivateProfileSectionW
VirtualQueryEx
GetStartupInfoA
VirtualProtect
GetCommandLineA
CancelIo
GetProcessHeap
HeapDestroy
CopyFileA
lstrcpyA
WriteConsoleW
WriteConsoleW
DeleteFileA
SetEvent
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
cryptui
CryptUIWizImport
CryptUIStartCertMgr
LocalEnroll
CryptUIWizDigitalSign
CryptUIWizExport
WizardFree
CryptUIDlgViewContext
WizardFree
LocalEnroll
DllUnregisterServer
LocalEnrollNoDS
CryptUIWizBuildCTL
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ