Static task
static1
Behavioral task
behavioral1
Sample
bca1e5e6f01827a04a0ac36022bdb58349dba14e7666cf45c6f59735d3f572e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bca1e5e6f01827a04a0ac36022bdb58349dba14e7666cf45c6f59735d3f572e1.exe
Resource
win10v2004-20221111-en
General
-
Target
bca1e5e6f01827a04a0ac36022bdb58349dba14e7666cf45c6f59735d3f572e1
-
Size
198KB
-
MD5
8ce61c8b4a8e47b8573e7558e3b4bf2a
-
SHA1
6759a79ee73ba49a657144495f78af14b4f979fb
-
SHA256
bca1e5e6f01827a04a0ac36022bdb58349dba14e7666cf45c6f59735d3f572e1
-
SHA512
ab00e46245b4fc323fdd7b639731237781f0f62cdc39cafe8572174912511c164d6d594607aaa54405a1a231276b609c008a08cf790246423a3a9ce300dca5bb
-
SSDEEP
6144:kABMlUdmTKWTE6xkKZ4CDtvhbdApS9TUIItnJIWS4:kDMWTE+HbmpS9ARnJIj4
Malware Config
Signatures
Files
-
bca1e5e6f01827a04a0ac36022bdb58349dba14e7666cf45c6f59735d3f572e1.exe windows x86
95f2841a8d02b2ba4b4cd77d85b3fe1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
WaitForMultipleObjects
RemoveDirectoryA
FindAtomA
GetCommandLineA
FatalExit
GetFileType
DeleteAtom
GetCurrentThreadId
GetModuleFileNameA
GetDriveTypeW
HeapCreate
FindClose
CreateDirectoryA
SetVolumeLabelA
AddAtomA
IsBadWritePtr
GetCurrentDirectoryW
GetModuleHandleA
HeapFree
CreatePipe
ClearCommBreak
CreateSemaphoreA
RemoveDirectoryA
cryptui
CryptUIDlgViewContext
CryptUIWizBuildCTL
WizardFree
CryptUIWizImport
DllUnregisterServer
CryptUIStartCertMgr
LocalEnroll
CryptUIWizDigitalSign
DllRegisterServer
WizardFree
CryptUIWizExport
LocalEnrollNoDS
CryptUIDlgFreeCAContext
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE