Static task
static1
Behavioral task
behavioral1
Sample
6d201cc17fb57f2cbbe5a427aef793cf7fcf161e2078a37756fca43fbd0bc25f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6d201cc17fb57f2cbbe5a427aef793cf7fcf161e2078a37756fca43fbd0bc25f.exe
Resource
win10v2004-20221111-en
General
-
Target
6d201cc17fb57f2cbbe5a427aef793cf7fcf161e2078a37756fca43fbd0bc25f
-
Size
12KB
-
MD5
7444f67edeaf700a4f66ed70dd27ed37
-
SHA1
393af22cb3197afa3c9e1073dbd5ed357a809528
-
SHA256
6d201cc17fb57f2cbbe5a427aef793cf7fcf161e2078a37756fca43fbd0bc25f
-
SHA512
72b9a6f4d009688da4dce6003f810e61be5a7747f2ddad70707f5c5faf5fa860941e3fddf4687cb0f0f96f77770e6ce3e4c750b91ce6215d1060605f12b71e68
-
SSDEEP
192:Un7odqZbaT+qhU55h+hy06SNPirnvfaNGWwiWnVfL:UMoZbh3Ehcfj31nVD
Malware Config
Signatures
Files
-
6d201cc17fb57f2cbbe5a427aef793cf7fcf161e2078a37756fca43fbd0bc25f.exe windows x86
3f4fcff8f7600be91d84019de0250aa0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
IsBadWritePtr
GetModuleHandleA
DeleteAtom
SetVolumeLabelA
GetCurrentThreadId
RemoveDirectoryA
FindClose
FindAtomA
HeapFree
CreatePipe
ClearCommBreak
FatalExit
CreateSemaphoreA
GetModuleFileNameA
GetCurrentDirectoryW
AddAtomA
CreateDirectoryA
GetFileType
GetDriveTypeW
RemoveDirectoryA
HeapCreate
GetCommandLineA
WriteFile
CloseHandle
cryptui
WizardFree
WizardFree
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIWizExport
CryptUIWizImport
LocalEnroll
DllRegisterServer
CryptUIWizBuildCTL
CryptUIStartCertMgr
DllUnregisterServer
CryptUIDlgFreeCAContext
CryptUIWizDigitalSign
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE