Static task
static1
Behavioral task
behavioral1
Sample
08f0704af4efc98353f94f1a0b3efea61d6be256a338c9d939024a95ff0b0bb2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
08f0704af4efc98353f94f1a0b3efea61d6be256a338c9d939024a95ff0b0bb2.exe
Resource
win10v2004-20221111-en
General
-
Target
08f0704af4efc98353f94f1a0b3efea61d6be256a338c9d939024a95ff0b0bb2
-
Size
61KB
-
MD5
71ab726f8471cfa12371346341ecd2d3
-
SHA1
b50da9f64264982447669846f7825fe523a10c03
-
SHA256
08f0704af4efc98353f94f1a0b3efea61d6be256a338c9d939024a95ff0b0bb2
-
SHA512
7d7127d4a8aafb7b49431952bccdff04771de729ba08ac519a080f01716af7136bcf222983ad2e33d498b513247a52ccbcaab9cbc5a2addc9783630e22038aa2
-
SSDEEP
768:2JaS3Wuwr0VzwBwbVgitOKOn9ydoC8Y1d/TgiSl8beG3j7nmIAfYlLr2WWLQGCwf:x2Wn6aXYGIVTgVgeG3MCLrUPCN4pwu5
Malware Config
Signatures
Files
-
08f0704af4efc98353f94f1a0b3efea61d6be256a338c9d939024a95ff0b0bb2.exe windows x86
e26083504067ca4b7dcbd0d5c463ed64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
CreateFileA
GetVersion
SetFileAttributesW
SetLastError
DeleteAtom
GetCommandLineA
SetLastError
ExitProcess
DeleteFileA
GetFileAttributesA
HeapSize
SetEndOfFile
ReadFile
GetModuleHandleA
GetCurrentDirectoryA
IsBadReadPtr
GetFileSize
VirtualAlloc
EnterCriticalSection
FindAtomW
SuspendThread
GetStdHandle
GetEnvironmentVariableA
cryptui
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnroll
CryptUIStartCertMgr
DllRegisterServer
CryptUIDlgViewContext
DllUnregisterServer
LocalEnrollNoDS
CryptUIWizExport
CryptUIWizImport
WizardFree
WizardFree
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eedfpsf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE