Static task
static1
Behavioral task
behavioral1
Sample
d951c26c4e3d66c3749f558365c932fb4f80af3862a41247e69e89b0ff2dc3e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d951c26c4e3d66c3749f558365c932fb4f80af3862a41247e69e89b0ff2dc3e6.exe
Resource
win10v2004-20220812-en
General
-
Target
d951c26c4e3d66c3749f558365c932fb4f80af3862a41247e69e89b0ff2dc3e6
-
Size
769KB
-
MD5
0dc96863cba23edc1349b18502ec2590
-
SHA1
7f4d775a2e6a9fbbdaf60069cbb03cb8391a7d98
-
SHA256
d951c26c4e3d66c3749f558365c932fb4f80af3862a41247e69e89b0ff2dc3e6
-
SHA512
5c8b041fa144b61e7266c598f6a56fe1a875f9338a665e9a7df09c7b11953fc95722f06edd85d115ff23892addba17da1704ffebfa33ece9051ab1306536209f
-
SSDEEP
12288:oa76T5aHncKwb1e05sYXOkzI1Of8r7VN41ybfIlceL0HTgi:etKq1eKekM1OEt7zI64Mgi
Malware Config
Signatures
Files
-
d951c26c4e3d66c3749f558365c932fb4f80af3862a41247e69e89b0ff2dc3e6.exe windows x86
f15a5ae01c685505faea6fdfc5113448
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
lstrlenW
MapViewOfFile
DeleteFileA
CreateMutexA
LoadLibraryA
OpenEventW
SetLastError
VirtualProtect
ReleaseSemaphore
RemoveDirectoryW
HeapSize
CreateFileMappingW
GetStartupInfoA
SetLastError
GetVersion
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
CreateDirectoryW
GetStdHandle
CreateFileA
HeapDestroy
GetFileSize
GetCommandLineW
cryptui
CryptUIWizImport
LocalEnroll
CryptUIWizBuildCTL
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizExport
WizardFree
CryptUIWizDigitalSign
DllUnregisterServer
DllRegisterServer
WizardFree
imgutil
DecodeImage
CreateMIMEMap
CreateMIMEMap
DecodeImage
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE