Static task
static1
Behavioral task
behavioral1
Sample
a7cf76c51be753980e6e6c79f2b55b83f39554d25644e7cc2fe7d83e75e52dfa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7cf76c51be753980e6e6c79f2b55b83f39554d25644e7cc2fe7d83e75e52dfa.exe
Resource
win10v2004-20220901-en
General
-
Target
a7cf76c51be753980e6e6c79f2b55b83f39554d25644e7cc2fe7d83e75e52dfa
-
Size
748KB
-
MD5
30b747833555eacac20a213a24530e49
-
SHA1
5ef42bd73b4a7c912a1827813db64af989950a1d
-
SHA256
a7cf76c51be753980e6e6c79f2b55b83f39554d25644e7cc2fe7d83e75e52dfa
-
SHA512
b8e9803f62e7aa7e112698ddbdd88ad4cebd042ee3661ded53b4ed82490af67bc7237fd926fed200f4dddb0aa49cd972de0cfe84d04c1b2215029d5b0800585c
-
SSDEEP
12288:YNCuWZXMe8zIeJSduHOhvCToUYbLiWbRZ1OoV61bYPtmpl20pTkBM:YAV8zIew+IPUYbLFT1dUNYPIlTD
Malware Config
Signatures
Files
-
a7cf76c51be753980e6e6c79f2b55b83f39554d25644e7cc2fe7d83e75e52dfa.exe windows x86
d17747921cdc194a30b2b770bcf9900c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
CreateDirectoryA
HeapCreate
GetFileType
GetModuleFileNameA
GetFileAttributesW
GetStdHandle
WriteFile
HeapFree
CreateSemaphoreA
GetDriveTypeW
GlobalSize
lstrlenW
Beep
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryW
GetCurrentThreadId
IsBadWritePtr
FindClose
CloseHandle
ClearCommBreak
FatalExit
GetStdHandle
WaitForMultipleObjects
cryptui
DllUnregisterServer
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIDlgFreeCAContext
CryptUIWizDigitalSign
WizardFree
WizardFree
CryptUIWizImport
CryptUIWizExport
DllRegisterServer
CryptUIStartCertMgr
LocalEnroll
CryptUIWizBuildCTL
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfmrpbe Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE