Static task
static1
Behavioral task
behavioral1
Sample
8ef74bd446a5968dfb7db8f2aa86f5c80c59365e9619c49841be7109fc6b9d21.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ef74bd446a5968dfb7db8f2aa86f5c80c59365e9619c49841be7109fc6b9d21.exe
Resource
win10v2004-20221111-en
General
-
Target
8ef74bd446a5968dfb7db8f2aa86f5c80c59365e9619c49841be7109fc6b9d21
-
Size
747KB
-
MD5
338437f53e8268de28e9204e04eb5d85
-
SHA1
b062a50640a0bc80b183b2fe8ef22d630251726d
-
SHA256
8ef74bd446a5968dfb7db8f2aa86f5c80c59365e9619c49841be7109fc6b9d21
-
SHA512
588bd3e5b2c5e1369c7aedd21ff9133dd48658e0b67433d5351d414f8f700324a2a4fa228541a3aae03d257f39affe677627f4aa9bef0e3430d634bdf9ed4e74
-
SSDEEP
12288:7+nUghkkNigWpDd0xqWeP+BoPxBLlqGmGi3wpPda4paFy3DgR8AMgtOE8SoSAiz3:CnUghkfg+yxA+ePJpigDvIyaMgtOEubd
Malware Config
Signatures
Files
-
8ef74bd446a5968dfb7db8f2aa86f5c80c59365e9619c49841be7109fc6b9d21.exe windows x86
e3620f8e79e60e99784935c0ab4aa78f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetDriveTypeW
CreateSemaphoreA
RemoveDirectoryA
GetCurrentDirectoryW
GetCommandLineA
DeleteAtom
AddAtomA
WaitForMultipleObjects
CreatePipe
HeapCreate
ClearCommBreak
HeapFree
GetModuleFileNameA
FindClose
SetVolumeLabelA
GetCurrentThreadId
CreateDirectoryA
WriteFile
FindAtomA
CloseHandle
IsBadWritePtr
RemoveDirectoryA
FatalExit
GetModuleHandleA
cryptui
DllUnregisterServer
CryptUIDlgFreeCAContext
WizardFree
DllRegisterServer
CryptUIWizExport
CryptUIStartCertMgr
CryptUIWizImport
LocalEnrollNoDS
CryptUIWizBuildCTL
WizardFree
LocalEnroll
CryptUIDlgViewContext
CryptUIWizDigitalSign
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE