Static task
static1
Behavioral task
behavioral1
Sample
8bd4523f2fdf5e5b8da5a5f5f3e6b3014b0a4561604f826a14f9747dbaf4e58d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bd4523f2fdf5e5b8da5a5f5f3e6b3014b0a4561604f826a14f9747dbaf4e58d.exe
Resource
win10v2004-20220812-en
General
-
Target
8bd4523f2fdf5e5b8da5a5f5f3e6b3014b0a4561604f826a14f9747dbaf4e58d
-
Size
773KB
-
MD5
57ab5eab1b57a19809edad091d338896
-
SHA1
b20958b7d9f46d250b308d04a1125b27dcf26c1b
-
SHA256
8bd4523f2fdf5e5b8da5a5f5f3e6b3014b0a4561604f826a14f9747dbaf4e58d
-
SHA512
25227320ef5aa9961f5b657da0e241ec736191ed5f454562c8fc1eaad42803c54413cb243cb35cedf89c6fe5c3452cdc8b1a52f86be2fc8c47a3964ff9a84e00
-
SSDEEP
12288:ZAoDQwlaoMjqKAbpUM5SLKXiL/TU9ueiy56/u6NhgHx+665str+Qh+pXJPno:e5aMgb5KTUubuogU5sYQ6Zfo
Malware Config
Signatures
Files
-
8bd4523f2fdf5e5b8da5a5f5f3e6b3014b0a4561604f826a14f9747dbaf4e58d.exe windows x86
62f1c78acc2f78e97b168c73c8d0ed9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetFileType
RemoveDirectoryA
HeapFree
CloseHandle
lstrlenW
CreatePipe
RemoveDirectoryA
GetModuleFileNameA
Beep
AddAtomA
GetCurrentThreadId
GetCurrentDirectoryW
GetDriveTypeW
CreateSemaphoreA
CreateDirectoryA
FatalExit
DeleteAtom
IsBadWritePtr
ClearCommBreak
WriteFile
GetModuleHandleA
GetCommandLineA
WaitForMultipleObjects
HeapCreate
cryptui
WizardFree
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIWizImport
DllUnregisterServer
CryptUIDlgViewContext
CryptUIWizExport
LocalEnroll
DllRegisterServer
CryptUIStartCertMgr
LocalEnrollNoDS
CryptUIWizDigitalSign
WizardFree
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE