Static task
static1
Behavioral task
behavioral1
Sample
40d1356421dcf7f4f2a1f09de36795b4ad8d6a4a1452471abfe70344520375c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
40d1356421dcf7f4f2a1f09de36795b4ad8d6a4a1452471abfe70344520375c5.exe
Resource
win10v2004-20220901-en
General
-
Target
40d1356421dcf7f4f2a1f09de36795b4ad8d6a4a1452471abfe70344520375c5
-
Size
747KB
-
MD5
0ddde5150116a72ef3c3fd39f6d7b6bc
-
SHA1
cd34814044a5d29bd83d50331d9e8fda7fd979f7
-
SHA256
40d1356421dcf7f4f2a1f09de36795b4ad8d6a4a1452471abfe70344520375c5
-
SHA512
5afb313a060e6c059628fb58f11650f32abcd490c680df64953310864d7caf6352ba5610b9fc54e5463f21c71f26af50874650e4c442639a422c364dbeeeace0
-
SSDEEP
12288:UTdMF1Bsq5A6+w29hNtWng5Vxume75PXgKwJyg5jB1cdrCOVeCElopAU+mzys:UTdQEq3+w+hfKmV4m2Bw7jwAieCEy
Malware Config
Signatures
Files
-
40d1356421dcf7f4f2a1f09de36795b4ad8d6a4a1452471abfe70344520375c5.exe windows x86
ce9d63c9f42ae626c2cf38775d3933d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
HeapFree
IsBadWritePtr
ClearCommBreak
Beep
GetCurrentThreadId
GetModuleHandleA
GetCommandLineA
CreateSemaphoreA
GlobalSize
GetFileAttributesW
GetFileType
FatalExit
GetStdHandle
FindClose
GetModuleFileNameA
GetCurrentDirectoryW
CreateDirectoryA
CloseHandle
lstrlenW
WriteFile
CreatePipe
HeapCreate
WaitForMultipleObjects
GetDriveTypeW
cryptui
CryptUIStartCertMgr
CryptUIDlgViewContext
DllUnregisterServer
LocalEnroll
CryptUIWizBuildCTL
CryptUIWizImport
WizardFree
CryptUIDlgFreeCAContext
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizDigitalSign
WizardFree
DllRegisterServer
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE