Static task
static1
Behavioral task
behavioral1
Sample
9043053de1ef7916d6ee0eca7b53d5db495e0d14074f1bcd8d42f3e16a6dceca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9043053de1ef7916d6ee0eca7b53d5db495e0d14074f1bcd8d42f3e16a6dceca.exe
Resource
win10v2004-20220812-en
General
-
Target
9043053de1ef7916d6ee0eca7b53d5db495e0d14074f1bcd8d42f3e16a6dceca
-
Size
22KB
-
MD5
6752f1b1ca296872380971e9435a7164
-
SHA1
04d54cc7ac067a29045814d4eb20d67996915e41
-
SHA256
9043053de1ef7916d6ee0eca7b53d5db495e0d14074f1bcd8d42f3e16a6dceca
-
SHA512
f44daf56c5b393aa2310bce6ebcedb60603006ec9ceca344cfe937021c9742ad1eb0ab389f0e97a72dd4439ede96427235a276733e4f5ba85aa64c3050e65978
-
SSDEEP
384:b1Ek9M0NaS3WL7ulrp6/Eivj06g1CYKHMlXY3l4ntSfemK3a3Fh9ho:bSSaS3WLKuE8A1eMNY3T5KKVho
Malware Config
Signatures
Files
-
9043053de1ef7916d6ee0eca7b53d5db495e0d14074f1bcd8d42f3e16a6dceca.exe windows x86
2fe84364f2d89ba4c30a3d14d5bef3ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleHandleA
FindAtomW
WaitForSingleObject
SetLastError
ExitProcess
DeleteFileW
ReadFile
IsBadReadPtr
VirtualAlloc
HeapSize
SetFileAttributesW
EnterCriticalSection
GetFileAttributesA
GetVersion
SetLastError
GetCurrentDirectoryA
SuspendThread
GetFileSize
SetEndOfFile
CloseHandle
GetEnvironmentVariableA
GetStdHandle
DeleteAtom
GetCommandLineA
cryptui
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIDlgFreeCAContext
CryptUIDlgSelectStoreA
CryptUIWizExport
DllRegisterServer
CryptUIWizImport
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIDlgFreeCAContext
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ