Static task
static1
Behavioral task
behavioral1
Sample
c2ddf42a6533ea87eedf9657cfcb7a4947afd127d706e0edc6cd7ff393fecf31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2ddf42a6533ea87eedf9657cfcb7a4947afd127d706e0edc6cd7ff393fecf31.exe
Resource
win10v2004-20221111-en
General
-
Target
c2ddf42a6533ea87eedf9657cfcb7a4947afd127d706e0edc6cd7ff393fecf31
-
Size
749KB
-
MD5
079c47ab0463ad5902ef6c7d9b3ff5f9
-
SHA1
445d75c67ac2dc980246a8310fd5438a5e364e3c
-
SHA256
c2ddf42a6533ea87eedf9657cfcb7a4947afd127d706e0edc6cd7ff393fecf31
-
SHA512
b9d52b1ade0c85b8b40f991340d17fdb44899351189b7964224009bfff55dbaf66c71e199b547a038943ac0fc2c84c011ae03ba7321eb7a427687359e16a5446
-
SSDEEP
12288:MCgUHQJWtfPZ5LsgUAl+Cny1TkCnoEvutU/XpygcVh6cvpTegpT1JtQt9hwGTS7:MGwJWtHD4gUAECyR9odhV8cxpLkpG
Malware Config
Signatures
Files
-
c2ddf42a6533ea87eedf9657cfcb7a4947afd127d706e0edc6cd7ff393fecf31.exe windows x86
d982de0ac667f7cb890fcf1e1e41a203
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
FindClose
HeapFree
SetVolumeLabelA
WaitForMultipleObjects
AddAtomA
GetModuleFileNameA
CreateDirectoryA
DeleteAtom
RemoveDirectoryA
FindAtomA
RemoveDirectoryA
CreateSemaphoreW
GetModuleHandleA
GetFileType
IsBadWritePtr
ClearCommBreak
GetDriveTypeW
WriteFile
GetCommandLineA
HeapCreate
ExitThread
SetEndOfFile
CloseHandle
GetProcessHeap
cryptui
LocalEnrollNoDS
CryptUIDlgViewContext
DllUnregisterServer
CryptUIWizImport
DllRegisterServer
WizardFree
CryptUIWizExport
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
LocalEnroll
CryptUIStartCertMgr
WizardFree
CryptUIWizBuildCTL
msrle32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE