Static task
static1
Behavioral task
behavioral1
Sample
a47e955d43a5270146a51e0124763a76e615aee4f953809a76c8491c60d240f0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a47e955d43a5270146a51e0124763a76e615aee4f953809a76c8491c60d240f0.exe
Resource
win10v2004-20220812-en
General
-
Target
a47e955d43a5270146a51e0124763a76e615aee4f953809a76c8491c60d240f0
-
Size
749KB
-
MD5
bc5611756a88874cee83a0a50a966206
-
SHA1
9b54343f5aab6e2d12c66e744499eb5e529cad10
-
SHA256
a47e955d43a5270146a51e0124763a76e615aee4f953809a76c8491c60d240f0
-
SHA512
e2bc88667a14a6bbad52aa386b6be441dbfd2596e3b31bf55a218a9c5057354101a745986b2ccb003d28cd45ce9470fa09437b9b9bdf2d064d9bc9db427bee3c
-
SSDEEP
12288:SzeY+Ze3fXspkDJrX0sL5o4WfJxx7qAU/BtPgpApIXPabPJDMVED/uLb8dd4iZ:SzEZe+kDJrXJGZxf2zTPgOGXPabPJDM
Malware Config
Signatures
Files
-
a47e955d43a5270146a51e0124763a76e615aee4f953809a76c8491c60d240f0.exe windows x86
796932812a9f22fe4962e7083f923dcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
WriteConsoleW
CreateDirectoryW
ResetEvent
FindClose
HeapFree
OpenEventA
SetStdHandle
VirtualProtectEx
GetModuleHandleA
GetCommandLineA
RemoveDirectoryA
Sleep
CreateMailslotW
ReleaseMutex
CreateFileA
SetEvent
FindClose
RemoveDirectoryA
CreateEventW
lstrlenA
GetLastError
WriteFile
DeleteFileA
CreateFileMappingW
cryptui
CryptUIWizDigitalSign
WizardFree
CryptUIWizBuildCTL
CryptUIStartCertMgr
DllRegisterServer
CryptUIWizImport
CryptUIDlgViewContext
LocalEnroll
DllUnregisterServer
CryptUIWizExport
CryptUIDlgFreeCAContext
WizardFree
LocalEnrollNoDS
dbnmpntw
ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ