Static task
static1
Behavioral task
behavioral1
Sample
57d58ddec96997ff62d84c6671b08fc5e816cc659ffd22e15d6abe62f5a3b5fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
57d58ddec96997ff62d84c6671b08fc5e816cc659ffd22e15d6abe62f5a3b5fe.exe
Resource
win10v2004-20220812-en
General
-
Target
57d58ddec96997ff62d84c6671b08fc5e816cc659ffd22e15d6abe62f5a3b5fe
-
Size
749KB
-
MD5
107bad2d8be233234117879c6dec3ad5
-
SHA1
51d04cd201a761451a0cc90eb493a1321d017927
-
SHA256
57d58ddec96997ff62d84c6671b08fc5e816cc659ffd22e15d6abe62f5a3b5fe
-
SHA512
158a3ff084e8cb93f1b4ac147711475282205da4b575af9ab089ccbaeffd894a4a00d4453aeabe579552fcc10be4ee0c3050635fa826c30b4b8e1f575c6d2441
-
SSDEEP
12288:eXSYvHkWk6HKswTKAqdMqMrw8PgwQExBnDhI1ISxamRIZ2WkZbo:ei/WkYSOAqdgk89nDn16ISMmR82t
Malware Config
Signatures
Files
-
57d58ddec96997ff62d84c6671b08fc5e816cc659ffd22e15d6abe62f5a3b5fe.exe windows x86
14767713b807ee34825f38e5f1e62bed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateEventW
WriteConsoleW
GetCommandLineA
GetLastError
Sleep
RemoveDirectoryA
OpenEventA
HeapFree
RemoveDirectoryA
CreateFileMappingW
FindClose
ReleaseSemaphore
FindClose
GetModuleHandleA
GetFileType
lstrlenA
SetStdHandle
CreateDirectoryW
CreateFileA
ResetEvent
WriteFile
CancelIo
ReleaseMutex
VirtualProtectEx
cryptui
CryptUIStartCertMgr
DllRegisterServer
CryptUIWizExport
WizardFree
LocalEnroll
WizardFree
CryptUIDlgViewContext
CryptUIWizImport
CryptUIDlgFreeCAContext
DllUnregisterServer
CryptUIWizBuildCTL
LocalEnrollNoDS
CryptUIWizDigitalSign
dbnmpntw
ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ