Static task
static1
Behavioral task
behavioral1
Sample
0b8b0c302d3c87e601db2060f8ef6b2d01dd1cda7c19cef9ba5c89d752dc5f12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b8b0c302d3c87e601db2060f8ef6b2d01dd1cda7c19cef9ba5c89d752dc5f12.exe
Resource
win10v2004-20220812-en
General
-
Target
0b8b0c302d3c87e601db2060f8ef6b2d01dd1cda7c19cef9ba5c89d752dc5f12
-
Size
291KB
-
MD5
3b0d1a5d6a551c9de654bc07e15b1260
-
SHA1
e1fc27209ef7ac803017dc3590121790182a9593
-
SHA256
0b8b0c302d3c87e601db2060f8ef6b2d01dd1cda7c19cef9ba5c89d752dc5f12
-
SHA512
3755e8b4e0ccbedb1cb969ad6f178c727cf0b26a135ceacc81b5d08fbce7586468cd02ffc80a69b96f310b88a3bbbad8a382b3afd0c6b2cfefed99d9f7f1a752
-
SSDEEP
6144:a3oO1yLhWdZQSp45E4UTS9oB/HdKyadcm1Jl7D/zkw7TFQ9a1O:UzmhMCqMzSyoVmemZrzQ
Malware Config
Signatures
Files
-
0b8b0c302d3c87e601db2060f8ef6b2d01dd1cda7c19cef9ba5c89d752dc5f12.exe windows x86
ccbef2d788e19223c8078a42cdcd865b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
WriteConsoleW
CopyFileA
lstrcpyA
WriteConsoleW
GetProcessHeap
GetPrivateProfileSectionW
GetModuleHandleA
HeapDestroy
GetFileAttributesW
VirtualProtect
SetEvent
Sleep
VirtualQueryEx
WriteConsoleW
GetStartupInfoA
GetCommandLineA
GetDriveTypeW
CancelIo
lstrlenW
GetStdHandle
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
cryptui
CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnroll
WizardFree
CryptUIWizExport
WizardFree
CryptUIDlgViewContext
CryptUIWizImport
LocalEnroll
CryptUIStartCertMgr
DllUnregisterServer
LocalEnrollNoDS
DllRegisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ