Static task
static1
Behavioral task
behavioral1
Sample
b82e373657e7abbae0138ef4b18b1c32574b532f47c086059afcb1398ae02c89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b82e373657e7abbae0138ef4b18b1c32574b532f47c086059afcb1398ae02c89.exe
Resource
win10v2004-20220812-en
General
-
Target
b82e373657e7abbae0138ef4b18b1c32574b532f47c086059afcb1398ae02c89
-
Size
745KB
-
MD5
7afa404496180366749fbb273aacaac3
-
SHA1
ad0ac0ca531989fb709a2c66505da3ca3845cdb1
-
SHA256
b82e373657e7abbae0138ef4b18b1c32574b532f47c086059afcb1398ae02c89
-
SHA512
dc40bfb70d065e707cb7b7147db9c9b7918df413b34f9a188b4a480e2efccea3910b7b06f8e1fa46baff6c0d07322da8abd3e7a430afd13e879973356ff97c37
-
SSDEEP
12288:f0/8ZSRv5XwAHfWUveFp2q/i1/cGe0tzfTZj5KoHThHJj5sm2:03LwKfJeo+Ge0hTZj5K6ThHJ5
Malware Config
Signatures
Files
-
b82e373657e7abbae0138ef4b18b1c32574b532f47c086059afcb1398ae02c89.exe windows x86
d68cbaf4fad7ccd39aa10b0e10c5c37a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
DeleteFileW
WaitForSingleObject
GetStdHandle
SetLastError
GetCommandLineA
VirtualAlloc
SuspendThread
GetEnvironmentVariableA
HeapSize
CloseHandle
SetLastError
GetModuleHandleA
ExitProcess
SetEndOfFile
GetVersion
GetCurrentDirectoryA
IsBadReadPtr
EnterCriticalSection
SetFileAttributesW
DeleteAtom
FindAtomW
ReadFile
GetFileSize
CreateFileA
cryptui
CryptUIWizBuildCTL
CryptUIDlgViewContext
CryptUIWizDigitalSign
DllUnregisterServer
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizImport
CryptUIDlgFreeCAContext
CryptUIDlgFreeCAContext
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIWizExport
LocalEnrollNoDS
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ