Static task
static1
Behavioral task
behavioral1
Sample
33f25019ac84793578c7d564bc96a007a7246d4de80a773d90406b13af050e0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33f25019ac84793578c7d564bc96a007a7246d4de80a773d90406b13af050e0f.exe
Resource
win10v2004-20220812-en
General
-
Target
33f25019ac84793578c7d564bc96a007a7246d4de80a773d90406b13af050e0f
-
Size
749KB
-
MD5
0c946c2f69db3eed9a132d5870c32111
-
SHA1
3ccda155ed95f0d41af014a61f38f60d5416165c
-
SHA256
33f25019ac84793578c7d564bc96a007a7246d4de80a773d90406b13af050e0f
-
SHA512
b50963e8e3c52568c4531fb16c662904b98f7844625538235733d9c880a1511624cb664f9373f708e67a723ca8bcf1135f0cbaf9abb93e1b5f12b5c176634a9f
-
SSDEEP
12288:I40EX4niQZIGfxcPeImBr74QfBc8lPNNWI0HMKRxOU1756JcXbprMIdWy:I+OZIG5cWImR0QfNLQINKGip
Malware Config
Signatures
Files
-
33f25019ac84793578c7d564bc96a007a7246d4de80a773d90406b13af050e0f.exe windows x86
5fe054da8a1cee35e3a4c1d22fcfa3f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
RemoveDirectoryA
lstrlenA
DeleteFileA
SetStdHandle
HeapFree
CreateEventW
SetEvent
GetCommandLineA
GetFileType
FindClose
GetLastError
GetModuleHandleA
WriteConsoleW
ReleaseMutex
ResetEvent
CreateDirectoryW
VirtualProtectEx
Sleep
FindClose
CreateFileMappingW
CreateMailslotW
OpenEventA
CreateFileA
RemoveDirectoryA
cryptui
LocalEnrollNoDS
CryptUIDlgFreeCAContext
CryptUIWizExport
LocalEnroll
DllUnregisterServer
CryptUIWizDigitalSign
WizardFree
DllRegisterServer
WizardFree
CryptUIWizImport
CryptUIStartCertMgr
CryptUIDlgViewContext
CryptUIWizBuildCTL
credssp
InitSecurityInterfaceW
InitSecurityInterfaceW
InitSecurityInterfaceW
InitSecurityInterfaceW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ