Static task
static1
Behavioral task
behavioral1
Sample
58dd0afb3830ef7111dec30d15d56270ce270b72f56ab6308971c8e14e9acfc9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
58dd0afb3830ef7111dec30d15d56270ce270b72f56ab6308971c8e14e9acfc9.exe
Resource
win10v2004-20220812-en
General
-
Target
58dd0afb3830ef7111dec30d15d56270ce270b72f56ab6308971c8e14e9acfc9
-
Size
297KB
-
MD5
ecdb3199dd417d9c23edff2dae7dd017
-
SHA1
4107217491cd5c310ace0c0b6d6ba82b353446b4
-
SHA256
58dd0afb3830ef7111dec30d15d56270ce270b72f56ab6308971c8e14e9acfc9
-
SHA512
d87254cba7424c5ad35afaf2095ce81c3533f0704216ce0d8c846c8df716425a1992589b74d0593806d0db27efde4d3e4a20c7901a7e716f5b2f1219fa7d9e8c
-
SSDEEP
6144:ezu3IPDdWCpf5KPbbrvD7bgXLieiN9WEO1K2Jph4lScq2l/2hOJ:e64PDdHKvDM7ieiN9KL4N2c
Malware Config
Signatures
Files
-
58dd0afb3830ef7111dec30d15d56270ce270b72f56ab6308971c8e14e9acfc9.exe windows x86
52d36aca79c57d9808aa02e72a371118
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreW
IsBadWritePtr
SetVolumeLabelA
GetProcessHeap
CreatePipe
HeapFree
HeapCreate
WaitForMultipleObjects
CreateDirectoryA
FindClose
SetEndOfFile
GetDriveTypeW
GetModuleHandleA
GetFileType
CloseHandle
FindAtomA
RemoveDirectoryA
WriteFile
ClearCommBreak
DeleteAtom
GetCommandLineA
AddAtomA
RemoveDirectoryA
ExitThread
GetModuleFileNameA
cryptui
CryptUIStartCertMgr
CryptUIWizExport
LocalEnroll
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
LocalEnrollNoDS
DllUnregisterServer
WizardFree
CryptUIWizImport
CryptUIDlgViewContext
DllRegisterServer
WizardFree
CryptUIWizDigitalSign
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE