Static task
static1
Behavioral task
behavioral1
Sample
46a180dd2603bf2da4ed3fb5dabb0bdf7183a311b1a59ea149c794e74785460a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46a180dd2603bf2da4ed3fb5dabb0bdf7183a311b1a59ea149c794e74785460a.exe
Resource
win10v2004-20221111-en
General
-
Target
46a180dd2603bf2da4ed3fb5dabb0bdf7183a311b1a59ea149c794e74785460a
-
Size
294KB
-
MD5
454b9a4c473f552a0a2bb92cfda569d0
-
SHA1
51dc14ae0f668795909b93099e134259da4e31d0
-
SHA256
46a180dd2603bf2da4ed3fb5dabb0bdf7183a311b1a59ea149c794e74785460a
-
SHA512
6c302dd6dd88bf29b0532d6d5b7fb1a396b974a8a4587627ae3e98727612356220120e268f890d94f99dc24fe7e74d5db1de01858c3f22f98ed83c7aa165c02b
-
SSDEEP
6144:Z3u2dMBPk+cb8N4rVoywJeuc1+6VltPfUm5JohPsb/rhy2foEhg:F9dEsjbFyywJeuc1+6dfUmvoOb80h
Malware Config
Signatures
Files
-
46a180dd2603bf2da4ed3fb5dabb0bdf7183a311b1a59ea149c794e74785460a.exe windows x86
4d3d54909d3bf5f60575e88fc714f4b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetStdHandle
lstrcpyA
CreatePipe
GetModuleHandleA
GetFileAttributesW
DeleteFileA
GetCurrentDirectoryA
GetCommandLineA
HeapDestroy
GetPriorityClass
lstrlenW
DisconnectNamedPipe
ResumeThread
SetEvent
CopyFileA
WriteConsoleW
VirtualProtect
WriteConsoleW
GetStartupInfoA
WriteConsoleW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIWizImport
LocalEnroll
DllUnregisterServer
CryptUIStartCertMgr
DllRegisterServer
CryptUIWizBuildCTL
WizardFree
CryptUIWizBuildCTL
LocalEnroll
WizardFree
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIWizExport
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE