Static task
static1
Behavioral task
behavioral1
Sample
a25d981fcf48b9785203c307734a89b8786d6dc152326bed558997ffef989c46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a25d981fcf48b9785203c307734a89b8786d6dc152326bed558997ffef989c46.exe
Resource
win10v2004-20221111-en
General
-
Target
a25d981fcf48b9785203c307734a89b8786d6dc152326bed558997ffef989c46
-
Size
200KB
-
MD5
2ca8498a303ba43753382a5cecd6e12e
-
SHA1
950e835a5fc7a451325b958b9839a602f50a1ff1
-
SHA256
a25d981fcf48b9785203c307734a89b8786d6dc152326bed558997ffef989c46
-
SHA512
8805a998c5da509aef696c614cd3cb27cbfee0663daf81c6f52244aeb8ddc2a2823f074f56379e7f22accb294052780145ff7ebb2b4092d15a059304294a3367
-
SSDEEP
6144:8lEEuYoSZE3v6BXrbbkGe6HNUeG5/XaOacylYkw:hYAv6B7bm6tRIPFacylYkw
Malware Config
Signatures
Files
-
a25d981fcf48b9785203c307734a89b8786d6dc152326bed558997ffef989c46.exe windows x86
d1c6dbe138321c5ec9c4006ff28646f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
RemoveDirectoryA
HeapFree
WaitForMultipleObjects
IsBadWritePtr
GetFileType
GetDriveTypeW
CloseHandle
SetVolumeLabelA
DeleteAtom
HeapCreate
ClearCommBreak
CreateDirectoryA
CreateSemaphoreA
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
GetCurrentThreadId
SetEndOfFile
FindClose
FindAtomA
RemoveDirectoryA
WriteFile
CreatePipe
AddAtomA
cryptui
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
DllRegisterServer
DllUnregisterServer
CryptUIWizImport
LocalEnroll
WizardFree
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizDigitalSign
WizardFree
mgmtapi
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE