Static task
static1
Behavioral task
behavioral1
Sample
a19a566f72e80c42ef83e10ab25f3840feb870d22bc4c14b8a58e6add65a6224.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a19a566f72e80c42ef83e10ab25f3840feb870d22bc4c14b8a58e6add65a6224.exe
Resource
win10v2004-20220812-en
General
-
Target
a19a566f72e80c42ef83e10ab25f3840feb870d22bc4c14b8a58e6add65a6224
-
Size
214KB
-
MD5
9c94785d612dcf00436669e084f5a807
-
SHA1
6a35337585e3d82cf41af2a28818bf50c659eff7
-
SHA256
a19a566f72e80c42ef83e10ab25f3840feb870d22bc4c14b8a58e6add65a6224
-
SHA512
ad1463e9b39162028574fe23ebcf25e3cc0f33409cbfe5fa98f9c729202202519e5272aa475ca67af6c76b917fcc6c60c22cade21922c7ab97f6fe6f48433a83
-
SSDEEP
6144:4iqMqZ99MeInpZdSdwE3VQuXS8k/PucdiZ9Xp:1qMqdMeIp6d93+2HoiDp
Malware Config
Signatures
Files
-
a19a566f72e80c42ef83e10ab25f3840feb870d22bc4c14b8a58e6add65a6224.exe windows x86
12d6791eb4485861c3686708aa8a52c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomW
SetFileAttributesW
CloseHandle
GetVersion
EnterCriticalSection
VirtualAlloc
RemoveDirectoryA
SetLastError
SuspendThread
GetCommandLineA
ExitProcess
ReadFile
GetModuleHandleA
GetFileAttributesA
Sleep
SetLastError
GetEnvironmentVariableW
CreateFileA
GetFileTime
HeapSize
GetFileType
WaitForSingleObject
GetCurrentDirectoryA
DeleteFileW
IsBadReadPtr
cryptui
CryptUIDlgFreeCAContext
CryptUIDlgFreeCAContext
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
CryptUIWizExport
DllUnregisterServer
DllRegisterServer
CryptUIWizDigitalSign
LocalEnroll
CryptUIWizImport
CryptUIDlgSelectStoreA
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ