Static task
static1
Behavioral task
behavioral1
Sample
5a51f82af0cb24b5b2bbd8655c2ad7953c891f0c6ee21d9e7f5b12cfa179981d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a51f82af0cb24b5b2bbd8655c2ad7953c891f0c6ee21d9e7f5b12cfa179981d.exe
Resource
win10v2004-20220812-en
General
-
Target
5a51f82af0cb24b5b2bbd8655c2ad7953c891f0c6ee21d9e7f5b12cfa179981d
-
Size
27KB
-
MD5
656e39c4a9d9e9ccf47bfd5386c2be09
-
SHA1
2dc1d13806d1bf5155c4acbb29d5f00168a59d8f
-
SHA256
5a51f82af0cb24b5b2bbd8655c2ad7953c891f0c6ee21d9e7f5b12cfa179981d
-
SHA512
efb456c25736e961cc9f59c095b0935c471e46321040697fdbebd65662335733f6118a74d1130319742be21f79234d5c53a10043b0f5bbd0e6a5f08c2ecde304
-
SSDEEP
768:mvjsaS3WOrWUf8sy7Hkfs+Exa3OnvC73:IV2WOaod7s+Ex07
Malware Config
Signatures
Files
-
5a51f82af0cb24b5b2bbd8655c2ad7953c891f0c6ee21d9e7f5b12cfa179981d.exe windows x86
b24204cd5e25698317c9f9da4d881b8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetLastError
VirtualAlloc
SetEndOfFile
GetVersion
SetFileAttributesW
CloseHandle
EnterCriticalSection
GetEnvironmentVariableA
DeleteAtom
GetFileAttributesA
SuspendThread
GetStdHandle
GetModuleHandleA
WaitForSingleObject
GetFileSize
SetLastError
FindAtomW
CreateFileA
HeapSize
GetCommandLineA
DeleteFileA
IsBadReadPtr
ReadFile
GetCurrentDirectoryA
cryptui
WizardFree
LocalEnrollNoDS
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIStartCertMgr
DllRegisterServer
WizardFree
CryptUIDlgViewContext
LocalEnroll
CryptUIWizExport
CryptUIDlgFreeCAContext
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fskmmrb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE