Static task
static1
Behavioral task
behavioral1
Sample
e3ce620bf399aa72b32d8e9e6f24725b0841fc587b72606a30daa59aafe3153a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e3ce620bf399aa72b32d8e9e6f24725b0841fc587b72606a30daa59aafe3153a.exe
Resource
win10v2004-20220812-en
General
-
Target
e3ce620bf399aa72b32d8e9e6f24725b0841fc587b72606a30daa59aafe3153a
-
Size
198KB
-
MD5
03599300f7ba44d9be806f8305260c6b
-
SHA1
35eb0e8552dd99ea5ccecae5038ef4cb30f2c2b4
-
SHA256
e3ce620bf399aa72b32d8e9e6f24725b0841fc587b72606a30daa59aafe3153a
-
SHA512
e5d73b649f35e8b9e3f5ea5d361b4b0b8327e4c225c5aaf298c4cc8d0b3a7ca0fd6e9de81ed858948f8280627c3428571aba8bb3ad3b56f3e129bd5ec58d47ef
-
SSDEEP
6144:4a1nF7pHFQzKFDHOBYsx28r/LtWbtMyzX05sKkK:4CFLl9uZr/pWZxYmKn
Malware Config
Signatures
Files
-
e3ce620bf399aa72b32d8e9e6f24725b0841fc587b72606a30daa59aafe3153a.exe windows x86
03d00af91ee1951a8f335e8c59787eb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrlenW
CreatePipe
Beep
FindClose
FatalExit
CreateSemaphoreA
GetFileAttributesW
ClearCommBreak
GetCommandLineA
GetDriveTypeW
WaitForMultipleObjects
CreateDirectoryA
GetModuleHandleA
GetCurrentThreadId
HeapCreate
WriteFile
GetCurrentDirectoryW
GetStdHandle
GetStdHandle
GlobalSize
GetFileType
IsBadWritePtr
HeapFree
GetModuleFileNameA
cryptui
CryptUIWizExport
WizardFree
LocalEnroll
CryptUIWizImport
DllRegisterServer
DllUnregisterServer
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIDlgFreeCAContext
WizardFree
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE