Static task
static1
Behavioral task
behavioral1
Sample
8a3c6f45c7c6ddeba274a481c41e8348a48a6045a71c480a5d04396eeacb4d01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a3c6f45c7c6ddeba274a481c41e8348a48a6045a71c480a5d04396eeacb4d01.exe
Resource
win10v2004-20220901-en
General
-
Target
8a3c6f45c7c6ddeba274a481c41e8348a48a6045a71c480a5d04396eeacb4d01
-
Size
61KB
-
MD5
dbd26381c07c858a94c9c3d146b2bac6
-
SHA1
a14fdb6a45770fd75c14182e62405859a8fd0a26
-
SHA256
8a3c6f45c7c6ddeba274a481c41e8348a48a6045a71c480a5d04396eeacb4d01
-
SHA512
b464f2415a3aeb6580c05299817de8ba81ecbd4c86540983c071b2657fee5e2772c423a98e3a1680707a4721efa3baceb00c494ea6e111b7c6f5ff5b598c2162
-
SSDEEP
1536:F72WzfaXYGIVTgVgeG3MCLrkvLOf9e+uCHD:FKnKvFrkDOf9e+uoD
Malware Config
Signatures
Files
-
8a3c6f45c7c6ddeba274a481c41e8348a48a6045a71c480a5d04396eeacb4d01.exe windows x86
fb13aeb767683e6ef383210104854e54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetVersion
DeleteAtom
WaitForSingleObject
VirtualAlloc
SetLastError
CloseHandle
SuspendThread
CreateFileA
GetStdHandle
SetLastError
GetFileSize
GetModuleHandleA
GetCurrentDirectoryA
DeleteFileA
EnterCriticalSection
GetEnvironmentVariableA
SetFileAttributesW
SetEndOfFile
ExitProcess
ReadFile
FindAtomW
GetFileAttributesA
GetCommandLineA
IsBadReadPtr
cryptui
LocalEnrollNoDS
CryptUIWizImport
LocalEnroll
WizardFree
CryptUIWizBuildCTL
DllUnregisterServer
WizardFree
DllRegisterServer
CryptUIStartCertMgr
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kkrscnc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE