Static task
static1
Behavioral task
behavioral1
Sample
5e4410976e0dd0a8ea14aba26d1cd6ff7ed5ad25168c66c3d0f47b869bc03dbd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e4410976e0dd0a8ea14aba26d1cd6ff7ed5ad25168c66c3d0f47b869bc03dbd.exe
Resource
win10v2004-20221111-en
General
-
Target
5e4410976e0dd0a8ea14aba26d1cd6ff7ed5ad25168c66c3d0f47b869bc03dbd
-
Size
768KB
-
MD5
78d49ee66c1c31c60e0d7fd4d5873ff1
-
SHA1
b83629bff4beb588b44fd930f9be26ce10a6170a
-
SHA256
5e4410976e0dd0a8ea14aba26d1cd6ff7ed5ad25168c66c3d0f47b869bc03dbd
-
SHA512
2644bd07d646dc865d01ccc95fcfdeee13f1a827f2e5762b6978502964c8ceb22fb6166881a49a9893159a112daedd1f58ad78568bad8ab587fe53c6e9e9d030
-
SSDEEP
12288:rxPq9bbeBctUBd0gzJjlkSGpzuAWCpxqyqpI/gxxoDvmFrjoIG8Mjp23Eb6W:BqpjwzZNGpzuANxrqC4ToDOFQIgyE
Malware Config
Signatures
Files
-
5e4410976e0dd0a8ea14aba26d1cd6ff7ed5ad25168c66c3d0f47b869bc03dbd.exe windows x86
5811274a051c0f50219aa931d4159d79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
HeapDestroy
MapViewOfFile
LoadLibraryA
ReleaseSemaphore
ReleaseSemaphore
CreateMutexA
GetFileSize
GetStartupInfoA
GetStdHandle
RemoveDirectoryW
CreateFileMappingW
GetCommandLineW
VirtualProtect
DeleteFileA
ReleaseMutex
SetLastError
FatalExit
lstrlenA
RemoveDirectoryW
GetVersion
OpenEventW
SetLastError
CreateFileA
CreateDirectoryW
cryptui
CryptUIDlgViewContext
DllRegisterServer
LocalEnrollNoDS
CryptUIWizExport
DllUnregisterServer
WizardFree
CryptUIWizDigitalSign
LocalEnroll
WizardFree
CryptUIWizBuildCTL
CryptUIWizImport
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
iernonce
RunOnceExProcess
InitCallback
InitCallback
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE