Static task
static1
Behavioral task
behavioral1
Sample
88efabcda95e66c6f4a4f5e54997ecdbf955045a88f5e96182c14fe049bda4a5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
88efabcda95e66c6f4a4f5e54997ecdbf955045a88f5e96182c14fe049bda4a5.exe
Resource
win10v2004-20220812-en
General
-
Target
88efabcda95e66c6f4a4f5e54997ecdbf955045a88f5e96182c14fe049bda4a5
-
Size
198KB
-
MD5
ccaa258c2b8813ba6b2f41f114f7ce35
-
SHA1
45139a69f70c6015e39d0bb2fa7fdb29a1fd5f64
-
SHA256
88efabcda95e66c6f4a4f5e54997ecdbf955045a88f5e96182c14fe049bda4a5
-
SHA512
25cc533979fca74435bee575eefb327140bdb75b0dfe84f6af26c8123a234f5c633c925848d33153dc14628cafbb5a99f666fbe1146acdd1a0e9776dac66eae1
-
SSDEEP
6144:PGT2VIKU3MchZ5ODUfK2ePXcBSxJXLyM01VPNPRZ5:OTsIKgVjUQK2uLSnNRj
Malware Config
Signatures
Files
-
88efabcda95e66c6f4a4f5e54997ecdbf955045a88f5e96182c14fe049bda4a5.exe windows x86
6422cda2e9e481b198843b13899bf063
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
RemoveDirectoryA
HeapSize
GetModuleHandleA
SetLastError
CloseHandle
GetVersion
GetFileAttributesA
GetCurrentDirectoryA
GetEnvironmentVariableA
SuspendThread
WaitForSingleObject
SetLastError
ExitProcess
GetFileSize
SetFileAttributesW
DeleteFileW
Sleep
EnterCriticalSection
GetCommandLineA
VirtualAlloc
SetEndOfFile
CreateFileA
FindAtomW
IsBadReadPtr
cryptui
LocalEnrollNoDS
CryptUIDlgSelectStoreA
CryptUIWizBuildCTL
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIDlgFreeCAContext
CryptUIWizImport
CryptUIWizExport
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
LocalEnroll
DllUnregisterServer
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ