Static task
static1
Behavioral task
behavioral1
Sample
98587d7f62b8fa256a10a30ae6db1956726918c586c3baa8dc701001309c682b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98587d7f62b8fa256a10a30ae6db1956726918c586c3baa8dc701001309c682b.exe
Resource
win10v2004-20220812-en
General
-
Target
98587d7f62b8fa256a10a30ae6db1956726918c586c3baa8dc701001309c682b
-
Size
56KB
-
MD5
f7d4c0ab00fc84e626dfa47e7f142013
-
SHA1
d0d752e6e5527c3fd026fb058c866a29e223bab9
-
SHA256
98587d7f62b8fa256a10a30ae6db1956726918c586c3baa8dc701001309c682b
-
SHA512
6ef93091bc24e8205588732ebb512c3384a8454e7085835613d35dfaab2bd236e7555b60cdad3026c8d510b454b1520a345aaa4c1e1ae436aa0b4543674b3a65
-
SSDEEP
768:b7gKaS3WQpvkgbVgitOKOn9ydoC8Y1d/TgiSl8beG3j7nmIAfYlLrpfyVgBE8ILl:472WsfaXYGIVTgVgeG3MCLrkvLOf9e+m
Malware Config
Signatures
Files
-
98587d7f62b8fa256a10a30ae6db1956726918c586c3baa8dc701001309c682b.exe windows x86
fb13aeb767683e6ef383210104854e54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetVersion
DeleteAtom
WaitForSingleObject
VirtualAlloc
SetLastError
CloseHandle
SuspendThread
CreateFileA
GetStdHandle
SetLastError
GetFileSize
GetModuleHandleA
GetCurrentDirectoryA
DeleteFileA
EnterCriticalSection
GetEnvironmentVariableA
SetFileAttributesW
SetEndOfFile
ExitProcess
ReadFile
FindAtomW
GetFileAttributesA
GetCommandLineA
IsBadReadPtr
cryptui
LocalEnrollNoDS
CryptUIWizImport
LocalEnroll
WizardFree
CryptUIWizBuildCTL
DllUnregisterServer
WizardFree
DllRegisterServer
CryptUIStartCertMgr
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ