Static task
static1
Behavioral task
behavioral1
Sample
d7c8523182ab662ca9eab82381efcf85ed4a0fff85b5b5263efd9a3afc9ecce3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7c8523182ab662ca9eab82381efcf85ed4a0fff85b5b5263efd9a3afc9ecce3.exe
Resource
win10v2004-20221111-en
General
-
Target
d7c8523182ab662ca9eab82381efcf85ed4a0fff85b5b5263efd9a3afc9ecce3
-
Size
55KB
-
MD5
3a354a80bdaebbfce9ca90a2f6aa5531
-
SHA1
bed0627accbd43302507809529c57882cc078ff2
-
SHA256
d7c8523182ab662ca9eab82381efcf85ed4a0fff85b5b5263efd9a3afc9ecce3
-
SHA512
6c8718e11d2c1dd205c31fd66174e9230f34d4a7ea42770a758bbb884cfb99e09458aba0d0342e43b7ec13b25defebb3ba447b83f22d17fe6ee200b6b4ecdcc3
-
SSDEEP
768:uhaS3WHzzUdEvCSb4MajQ1Y3DUAhQ48nXt4aNelZmn5wTWarhGPV5KmNzvX:Z2WTzyEvCe4MKQ289Hku5wSWsP7pvX
Malware Config
Signatures
Files
-
d7c8523182ab662ca9eab82381efcf85ed4a0fff85b5b5263efd9a3afc9ecce3.exe windows x86
8fea956312be2109cf84e7cc7d0f4487
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetEndOfFile
SuspendThread
SetFileAttributesW
IsBadReadPtr
EnterCriticalSection
ExitProcess
GetEnvironmentVariableA
GetModuleHandleA
GetVersion
GetCurrentDirectoryA
CreateFileA
GetStdHandle
HeapSize
SetLastError
FindAtomW
GetFileAttributesA
SetLastError
DeleteAtom
VirtualAlloc
WaitForSingleObject
GetFileSize
ReadFile
DeleteFileA
GetCommandLineA
cryptui
WizardFree
CryptUIStartCertMgr
CryptUIWizImport
LocalEnroll
WizardFree
DllRegisterServer
CryptUIWizDigitalSign
CryptUIWizBuildCTL
LocalEnrollNoDS
CryptUIDlgFreeCAContext
CryptUIWizExport
CryptUIDlgViewContext
DllUnregisterServer
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE