Static task
static1
Behavioral task
behavioral1
Sample
534cfa1f0dd6b13daf23ab3edf361da15d664c6037f2bd10f32bd2c9a713a4af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
534cfa1f0dd6b13daf23ab3edf361da15d664c6037f2bd10f32bd2c9a713a4af.exe
Resource
win10v2004-20220812-en
General
-
Target
534cfa1f0dd6b13daf23ab3edf361da15d664c6037f2bd10f32bd2c9a713a4af
-
Size
749KB
-
MD5
0cd3b156e683d8f51e6e0d2c5a5c2935
-
SHA1
71fc19af5b585757b587f6449719e5dd5625cbba
-
SHA256
534cfa1f0dd6b13daf23ab3edf361da15d664c6037f2bd10f32bd2c9a713a4af
-
SHA512
525dd01c1c36b7086d955817acb64fa195473c1bb216f70cc131b2e5de07d3f493b1e68510c132c62bf2e4d33940da7364de0265c3eeaf1334fd129cc0ee0e67
-
SSDEEP
12288:2xa9/lVZNpSid6Lydk7IHrv3kE5Y03OiVrkwE8rtTHNyl6ow04X2xnj1nON3T:2gVZyisL1crRY03OiEqTtyl6u3k
Malware Config
Signatures
Files
-
534cfa1f0dd6b13daf23ab3edf361da15d664c6037f2bd10f32bd2c9a713a4af.exe windows x86
4fe6e691bdb5662d067568a67e7dae01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
SetStdHandle
DeleteFileA
ResetEvent
SetEvent
RemoveDirectoryA
GetLastError
GetCommandLineA
CreateMailslotW
CreateEventW
lstrlenA
CreateFileA
GetModuleHandleA
VirtualProtectEx
ReleaseMutex
HeapFree
CreateDirectoryW
GetFileType
WriteFile
CreateFileMappingW
Sleep
FindClose
WriteConsoleW
FindClose
RemoveDirectoryA
cryptui
CryptUIDlgFreeCAContext
DllRegisterServer
LocalEnroll
CryptUIDlgViewContext
CryptUIWizImport
WizardFree
WizardFree
CryptUIWizExport
DllUnregisterServer
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizBuildCTL
CryptUIWizDigitalSign
dbnmpntw
ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ