Static task
static1
Behavioral task
behavioral1
Sample
74eae89d89cea4e0c8e9f6182f4f4068a8f8f36e3aa6e6933898d822fa6f120e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74eae89d89cea4e0c8e9f6182f4f4068a8f8f36e3aa6e6933898d822fa6f120e.exe
Resource
win10v2004-20220901-en
General
-
Target
74eae89d89cea4e0c8e9f6182f4f4068a8f8f36e3aa6e6933898d822fa6f120e
-
Size
745KB
-
MD5
6d327268ff1f9fc14d859371c842ce1a
-
SHA1
3cdd0ee542b3da7f4603f96ac37651e1cdec1d33
-
SHA256
74eae89d89cea4e0c8e9f6182f4f4068a8f8f36e3aa6e6933898d822fa6f120e
-
SHA512
5f6cdd0968c6508a5c5b1bca05c91bb365af158f543c85f7dbadb43e2e0da8916869435d9176fe24485d6e9770d640711b06832c24362a0d17dbe99e16b8fa82
-
SSDEEP
12288:Nl28vFunLMv6VUoZwaWXo+yPOzGF5/KdmxvVTpA+0JLDnxtbmIFhI4j8DB4x8c7y:NlnYRUzRKGrdmLTpA+0J3nfbRI4j81G3
Malware Config
Signatures
Files
-
74eae89d89cea4e0c8e9f6182f4f4068a8f8f36e3aa6e6933898d822fa6f120e.exe windows x86
d5cbdb3230f23d68a2af1e712cbf4e69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CreateFileA
CloseHandle
HeapSize
GetFileTime
ReadFile
GetCommandLineW
WaitForSingleObject
SetFileAttributesW
DeleteFileW
GetEnvironmentVariableW
SuspendThread
FindAtomW
RemoveDirectoryA
GetVersion
GetModuleHandleA
ExitProcess
GetFileType
Sleep
VirtualAlloc
GetCurrentDirectoryW
GetFileAttributesA
SetLastError
EnterCriticalSection
IsBadReadPtr
cryptui
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
LocalEnroll
DllRegisterServer
CryptUIWizBuildCTL
CryptUIWizImport
LocalEnrollNoDS
CryptUIWizExport
DllUnregisterServer
CryptUIDlgFreeCAContext
CryptUIDlgSelectStoreA
CryptUIDlgFreeCAContext
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ