Static task
static1
Behavioral task
behavioral1
Sample
b254541d0b3c3c315b115e68a91a8225e9f53dfac6dfb3be9d5a8621a5db3845.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b254541d0b3c3c315b115e68a91a8225e9f53dfac6dfb3be9d5a8621a5db3845.exe
Resource
win10v2004-20220812-en
General
-
Target
b254541d0b3c3c315b115e68a91a8225e9f53dfac6dfb3be9d5a8621a5db3845
-
Size
745KB
-
MD5
ab362f18bad64c9ad0c0b0c4b30ebd16
-
SHA1
233b55060438ce0299aead137e06c5a23a79fbde
-
SHA256
b254541d0b3c3c315b115e68a91a8225e9f53dfac6dfb3be9d5a8621a5db3845
-
SHA512
b4c76e542a0b2ade94d7c7e6307d22798549e2d6a2bf70f52243a3ab84431e2422a551d66a08a424dbd803050aa19fc31aef775a3201b70fc3eabb0c55c3fa19
-
SSDEEP
12288:cMM8YPyqC2aFyYjv7jUkjvj7A919WXSdtF66HHLEi8xkqRbwpi0F99LuB:cvaFyYj7V/iWXSZHwuqEE0f
Malware Config
Signatures
Files
-
b254541d0b3c3c315b115e68a91a8225e9f53dfac6dfb3be9d5a8621a5db3845.exe windows x86
d83ede01fa9456edbc149f80c4946e9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetCommandLineA
EnterCriticalSection
WaitForSingleObject
SuspendThread
VirtualAlloc
DeleteFileW
RemoveDirectoryA
HeapSize
GetCurrentDirectoryA
IsBadReadPtr
GetVersion
GetModuleHandleA
ReadFile
GetEnvironmentVariableA
CloseHandle
ExitProcess
SetLastError
GetFileSize
GetFileAttributesA
FindAtomW
SetLastError
SetFileAttributesW
CreateFileA
Sleep
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgFreeCAContext
CryptUIWizImport
DllUnregisterServer
CryptUIWizExport
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
LocalEnroll
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ