Static task
static1
Behavioral task
behavioral1
Sample
f249943b088800804f767263717f4e35f7457a20ae851e6f30f3404d3c62469d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f249943b088800804f767263717f4e35f7457a20ae851e6f30f3404d3c62469d.exe
Resource
win10v2004-20220901-en
General
-
Target
f249943b088800804f767263717f4e35f7457a20ae851e6f30f3404d3c62469d
-
Size
292KB
-
MD5
0d5b1d23579139c7872f799c270daa70
-
SHA1
83b6ec8d0f7e67e30bb031fc67a28bc23c4a00bc
-
SHA256
f249943b088800804f767263717f4e35f7457a20ae851e6f30f3404d3c62469d
-
SHA512
f4e1e3a8e344ccb0e72538f0c40b4313e97506a019703945f8f17a7f37d48362e16e6bd918fd87568772283012b3c8c16842138e952b90c39d7b3f7a10639cb9
-
SSDEEP
6144:Bhje2+6SNmHf1G6sTDMKdNIw++U/LyRYZrjUJYrLoIwf1Y:BhjH+Qd5stXb+fGRssJYrLoIX
Malware Config
Signatures
Files
-
f249943b088800804f767263717f4e35f7457a20ae851e6f30f3404d3c62469d.exe windows x86
d86d4e11d699f47fc0319e756832a44b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
GetStdHandle
GetModuleHandleA
HeapDestroy
GetPrivateProfileSectionW
DeleteFileA
VirtualQueryEx
GetCommandLineA
GetFileAttributesW
WriteConsoleW
ResumeThread
Sleep
VirtualProtect
WriteConsoleW
lstrlenW
GetProcessHeap
WriteConsoleW
GetStartupInfoA
lstrcpyA
SetEvent
CopyFileA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
cryptui
CryptUIWizImport
WizardFree
LocalEnrollNoDS
CryptUIDlgViewContext
CryptUIWizExport
CryptUIWizDigitalSign
LocalEnroll
CryptUIStartCertMgr
DllRegisterServer
LocalEnroll
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.expimp Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ