Static task
static1
Behavioral task
behavioral1
Sample
41ed7fd70324d0884ef2320a43f3d665759c46f585846a62c758371ff1a1b06f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
41ed7fd70324d0884ef2320a43f3d665759c46f585846a62c758371ff1a1b06f.exe
Resource
win10v2004-20220812-en
General
-
Target
41ed7fd70324d0884ef2320a43f3d665759c46f585846a62c758371ff1a1b06f
-
Size
118KB
-
MD5
1c27ad2bd93f7e25ccf16171de441d40
-
SHA1
49f56620b2362627eb52a527e8c619b2793494e9
-
SHA256
41ed7fd70324d0884ef2320a43f3d665759c46f585846a62c758371ff1a1b06f
-
SHA512
aea0329a82f4e88d950cf1bccaf8e22aa1d1e21235ed24e1cc8ec34da1514a7282025f84110e10efea6ed7531d89ebd8897304e3e4182ebb2a4eada2dc64378a
-
SSDEEP
3072:mXVDoijX0+EMqgsXRYQesF6ws87FCr5trcxm2dXpK:sDbjE+EZgsXKNt8ZCHcxVpK
Malware Config
Signatures
Files
-
41ed7fd70324d0884ef2320a43f3d665759c46f585846a62c758371ff1a1b06f.exe windows x86
6fb7fcb2ea495e894e3d57b470174191
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
WriteConsoleW
GetCommandLineA
GetModuleHandleA
Sleep
GetDriveTypeW
VirtualQueryEx
CopyFileA
GetStdHandle
DeleteFileA
GetProcessHeap
GetStartupInfoA
SetEvent
WriteConsoleW
lstrlenW
GetPrivateProfileSectionW
VirtualProtect
ResumeThread
WriteConsoleW
GetFileAttributesW
lstrcpyA
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
cryptui
WizardFree
CryptUIWizImport
DllUnregisterServer
CryptUIWizDigitalSign
CryptUIWizExport
LocalEnroll
CryptUIDlgViewContext
LocalEnrollNoDS
WizardFree
DllRegisterServer
CryptUIWizBuildCTL
LocalEnroll
CryptUIStartCertMgr
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.expimp Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ