Static task
static1
Behavioral task
behavioral1
Sample
686e636e728eef774236457b51f6f7b958f97fd43b6eee2690abb930425be377.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
686e636e728eef774236457b51f6f7b958f97fd43b6eee2690abb930425be377.exe
Resource
win10v2004-20220812-en
General
-
Target
686e636e728eef774236457b51f6f7b958f97fd43b6eee2690abb930425be377
-
Size
83KB
-
MD5
bbf3f422159f31b630bbf1208ecb08c1
-
SHA1
6925e87886cc5f9f0145fd88d8e9c17b849b2fc1
-
SHA256
686e636e728eef774236457b51f6f7b958f97fd43b6eee2690abb930425be377
-
SHA512
8a3fc65600720748ff6cb4185a0fd4ff50c49072e118397c6eebaa0dc0f22d8afa74a96628073785eb405c334f3de9dfbd72b39f3cf3bf77681ff3db6439c601
-
SSDEEP
1536:pCc1pDGEODcQEClCjj3W6snIIrkgEcsYcMtoxEnj7V:pCcUUHzsn8Veoxm
Malware Config
Signatures
Files
-
686e636e728eef774236457b51f6f7b958f97fd43b6eee2690abb930425be377.exe windows x86
51d47748e357c80d1ea43834a4023fe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
CreateFileA
SetLastError
lstrlenA
HeapDestroy
ReleaseSemaphore
VirtualProtect
MapViewOfFile
GetStartupInfoA
ReleaseMutex
GetCommandLineW
CreateMutexA
DeleteFileA
GetVersion
OpenEventW
RemoveDirectoryW
GetStdHandle
RemoveDirectoryW
ReleaseSemaphore
LoadLibraryA
HeapSize
SetLastError
CreateDirectoryW
GetFileSize
CreateFileMappingW
cryptui
WizardFree
CryptUIWizBuildCTL
WizardFree
CryptUIWizDigitalSign
CryptUIDlgViewContext
DllRegisterServer
CryptUIWizExport
CryptUIStartCertMgr
CryptUIWizImport
CryptUIDlgFreeCAContext
DllUnregisterServer
LocalEnroll
LocalEnrollNoDS
iernonce
InitCallback
InitCallback
RunOnceExProcess
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE