Static task
static1
Behavioral task
behavioral1
Sample
e043e144391ac339c5ac377317e12c0dede3b0626b632171e7f06f8709084611.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e043e144391ac339c5ac377317e12c0dede3b0626b632171e7f06f8709084611.exe
Resource
win10v2004-20220812-en
General
-
Target
e043e144391ac339c5ac377317e12c0dede3b0626b632171e7f06f8709084611
-
Size
22KB
-
MD5
b360bd0d6a4e791ef5f49e42f1f03ebd
-
SHA1
90543a68b6beea4e93c878d7d00d5f68c966d37b
-
SHA256
e043e144391ac339c5ac377317e12c0dede3b0626b632171e7f06f8709084611
-
SHA512
4df6ea9f809fd0dd9e6a04b90385ff61d1e8eeff1c322903bc0e5d78482b6ebddee2f68c17b640363a65423f9f0289d28248b5710b0168dee2d39fbe8ae6684b
-
SSDEEP
384:ffL83CTSnuzsoXlp7/G+mC6VNwUKfIKytjx1R8sU:ffoq7lpT3mHVNwT4usU
Malware Config
Signatures
Files
-
e043e144391ac339c5ac377317e12c0dede3b0626b632171e7f06f8709084611.exe windows x86
f42f40d88da5be5a570f23c7d2091c95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetCurrentDirectoryW
CreatePipe
GetModuleFileNameA
GetFileAttributesW
IsBadWritePtr
GetStdHandle
WriteFile
lstrlenW
CreateDirectoryA
HeapFree
CancelIo
CreateSemaphoreA
GetCommandLineA
GetModuleHandleA
ExitThread
GetFileType
GetCurrentThreadId
GetDriveTypeW
FindClose
GetStdHandle
WaitForMultipleObjects
Beep
CloseHandle
GlobalSize
cryptui
WizardFree
CryptUIDlgFreeCAContext
LocalEnroll
CryptUIStartCertMgr
CryptUIWizExport
DllRegisterServer
CryptUIWizBuildCTL
CryptUIWizDigitalSign
CryptUIWizImport
LocalEnrollNoDS
WizardFree
DllUnregisterServer
CryptUIDlgViewContext
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE