Static task
static1
Behavioral task
behavioral1
Sample
9c6ab61daac33bed3c423ed8c16a668d3ab59da35f82ba554f2193043d502465.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c6ab61daac33bed3c423ed8c16a668d3ab59da35f82ba554f2193043d502465.exe
Resource
win10v2004-20220812-en
General
-
Target
9c6ab61daac33bed3c423ed8c16a668d3ab59da35f82ba554f2193043d502465
-
Size
749KB
-
MD5
61f38f42d8ba1ff031cc8cb4c15f9c26
-
SHA1
7c9d0b43e0c92e2712e8f143c11e8ec72eb02b35
-
SHA256
9c6ab61daac33bed3c423ed8c16a668d3ab59da35f82ba554f2193043d502465
-
SHA512
d7626e88f30c3f57696e99a56cb84ae00808a096839d90d1989b93e6fe582cdf58b218e3610982d23daab0084906647f11d8b88b23a1ffa2cacd3a546f7485f2
-
SSDEEP
12288:uaCzdykG9/5YLYYUXyZTkBDMPi8pdKDTUGWe6IUA9SLLjtR2dgdFQQH9MuX8hOi:6UkG9h9VipdgUw6Q9SZRagL9COi
Malware Config
Signatures
Files
-
9c6ab61daac33bed3c423ed8c16a668d3ab59da35f82ba554f2193043d502465.exe windows x86
587f333bfad06b9367c09f2eb8f57032
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
CreateEventW
FindClose
VirtualProtectEx
GetModuleHandleA
CreateFileMappingW
ResetEvent
Sleep
RemoveDirectoryA
RemoveDirectoryA
SetStdHandle
HeapFree
CreateMailslotW
lstrlenA
DeleteFileA
FindClose
GetCommandLineA
GetLastError
GetFileType
CreateFileA
WriteConsoleW
ReleaseMutex
SetEvent
WriteFile
CreateDirectoryW
cryptui
CryptUIWizDigitalSign
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
CryptUIWizExport
CryptUIWizImport
LocalEnrollNoDS
WizardFree
CryptUIDlgViewContext
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
LocalEnroll
dbnmpntw
ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ