Static task
static1
Behavioral task
behavioral1
Sample
9288344bed3c166831be7b8f40a63f1d5230b1ef02ab5c643c831e7956140f80.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9288344bed3c166831be7b8f40a63f1d5230b1ef02ab5c643c831e7956140f80.exe
Resource
win10v2004-20221111-en
General
-
Target
9288344bed3c166831be7b8f40a63f1d5230b1ef02ab5c643c831e7956140f80
-
Size
748KB
-
MD5
3c96570f4851143ff325c3d4ababb96c
-
SHA1
210a66c362e5e6d4df55ed6449fed1e1ac6ee0e2
-
SHA256
9288344bed3c166831be7b8f40a63f1d5230b1ef02ab5c643c831e7956140f80
-
SHA512
28863e1f196956db65863491397cba121df2e2ed6fdd7cbee33947d5ac0f488b5ca6ae70ab26e83b7899651ed401cc65a8c6571158c69ddcc306eb6154a12391
-
SSDEEP
12288:sNCuWZXMe8zIeJSduHOhvCToUYbLiWbRZ1OoV61bYPtmpl20pTkBa:sAV8zIew+IPUYbLFT1dUNYPIlT9
Malware Config
Signatures
Files
-
9288344bed3c166831be7b8f40a63f1d5230b1ef02ab5c643c831e7956140f80.exe windows x86
ea7c60eb8e0682c3149e7106506dffbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
IsBadWritePtr
FindClose
CreatePipe
GetFileType
GetFileAttributesW
GlobalSize
GetCurrentThreadId
CreateDirectoryA
WaitForMultipleObjects
GetModuleHandleA
GetModuleFileNameA
HeapFree
Beep
ClearCommBreak
HeapCreate
WriteFile
GetStdHandle
lstrlenW
GetStdHandle
FatalExit
GetCommandLineA
CloseHandle
GetCurrentDirectoryW
GetDriveTypeW
cryptui
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
DllRegisterServer
LocalEnroll
CryptUIWizBuildCTL
WizardFree
DllUnregisterServer
CryptUIWizDigitalSign
CryptUIStartCertMgr
CryptUIWizImport
CryptUIWizExport
LocalEnrollNoDS
WizardFree
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vwldbhs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE