Static task
static1
Behavioral task
behavioral1
Sample
341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9.exe
Resource
win10v2004-20221111-en
General
-
Target
341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9
-
Size
745KB
-
MD5
ecb01c1e3420ec3b53bab134371f276d
-
SHA1
a784d4174864d385f8e82ff18293da8bef9d47fb
-
SHA256
341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9
-
SHA512
3c72e14ea0cc9b88ba5a9e546d5f0d807310439adb707ee14450064f47697a434069e64854266415b9ca3d46d81bc12955d69ad23a2f0f87e667a3261d474ed8
-
SSDEEP
12288:pJb97JYYb7xnzIOogKt5C6KntYrujOz6pS5almtMC0Lqj31rKnHGrdpAC1f4b30:3b7JFRKuqrovm6uTxMmrdpACJ4j0
Malware Config
Signatures
Files
-
341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9.exe windows x86
6464ddc30fb3605f1b5f57f5959c44c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
CloseHandle
SetLastError
SetEndOfFile
HeapSize
CreateFileA
GetVersion
FindAtomW
SetLastError
EnterCriticalSection
DeleteFileA
GetModuleHandleA
VirtualAlloc
ExitProcess
DeleteAtom
WaitForSingleObject
GetStdHandle
SuspendThread
SetFileAttributesW
GetEnvironmentVariableA
GetFileAttributesA
ReadFile
GetCommandLineA
GetFileSize
GetCurrentDirectoryA
cryptui
DllRegisterServer
WizardFree
LocalEnrollNoDS
DllUnregisterServer
LocalEnroll
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
CryptUIWizImport
CryptUIWizExport
WizardFree
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ