Static task
static1
Behavioral task
behavioral1
Sample
7f4869039dfadb9be794e532eefe3a0188e6c2e4c779fca421e0b998b8b7c7e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f4869039dfadb9be794e532eefe3a0188e6c2e4c779fca421e0b998b8b7c7e3.exe
Resource
win10v2004-20220812-en
General
-
Target
7f4869039dfadb9be794e532eefe3a0188e6c2e4c779fca421e0b998b8b7c7e3
-
Size
61KB
-
MD5
8414a177fd122b230d02c2abb3a88d55
-
SHA1
8a361200361f4fd1c4627160d4993feafff36014
-
SHA256
7f4869039dfadb9be794e532eefe3a0188e6c2e4c779fca421e0b998b8b7c7e3
-
SHA512
a98330f6c079216cfdefa112b6627fc513645acc8da6a73bd32f1574bcbee1300ad3553f58e01f5872b366415d4295fb4a748bf84b6d52361e58865f830838ac
-
SSDEEP
1536:H2WUz/aXYGIVTgVgeG3MCLrIME5AkC2vV/:WCKvFrlCt
Malware Config
Signatures
Files
-
7f4869039dfadb9be794e532eefe3a0188e6c2e4c779fca421e0b998b8b7c7e3.exe windows x86
2085802caec7cb504d6e0256bc5db064
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
ReadFile
SetLastError
HeapSize
SetEndOfFile
FindAtomW
GetModuleHandleA
WaitForSingleObject
IsBadReadPtr
DeleteAtom
GetVersion
CloseHandle
GetEnvironmentVariableA
CreateFileA
EnterCriticalSection
SetFileAttributesW
SetLastError
GetCommandLineA
GetCurrentDirectoryA
GetStdHandle
VirtualAlloc
DeleteFileA
GetFileAttributesA
ExitProcess
GetFileSize
cryptui
CryptUIWizExport
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
DllRegisterServer
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIDlgFreeCAContext
WizardFree
LocalEnroll
CryptUIWizImport
CryptUIStartCertMgr
CryptUIWizDigitalSign
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE