Static task
static1
Behavioral task
behavioral1
Sample
f2e3e926f18ce7b6e20310009bf812584937d266ea9a2446eb1235c8f4049646.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2e3e926f18ce7b6e20310009bf812584937d266ea9a2446eb1235c8f4049646.exe
Resource
win10v2004-20221111-en
General
-
Target
f2e3e926f18ce7b6e20310009bf812584937d266ea9a2446eb1235c8f4049646
-
Size
747KB
-
MD5
9f172f213c103d61b86be8d0af8bbcb1
-
SHA1
b607d831e485c5566c2540806ecd0e7b565dc3d9
-
SHA256
f2e3e926f18ce7b6e20310009bf812584937d266ea9a2446eb1235c8f4049646
-
SHA512
834ffc9ba909816546ab626b515ae3da9dc56d5571b5f18cb900ec83bd85c9bc5d3665c0570c6f8695e1195ad2f0c0ef7890f91692f18403d677a5b5c8f55cec
-
SSDEEP
12288:WAATgbiO6XQnmuv7F9ZuY35VCOOiBaWrBmzPqosDo3P0DqVSkZ9p25BsO/xc:DATguOBDvxrfVh1aWrBmzDN0yP9pw
Malware Config
Signatures
Files
-
f2e3e926f18ce7b6e20310009bf812584937d266ea9a2446eb1235c8f4049646.exe windows x86
810c9fea48bb666b9b9b5ef8d30d6560
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
WriteFile
AddAtomA
WaitForMultipleObjects
GetCurrentDirectoryW
RemoveDirectoryA
ClearCommBreak
CreateSemaphoreA
CreatePipe
Beep
GetCommandLineA
DeleteAtom
IsBadWritePtr
GetModuleFileNameA
FindClose
GetCurrentThreadId
GetDriveTypeW
HeapFree
GetModuleHandleA
HeapCreate
FatalExit
CreateDirectoryA
RemoveDirectoryA
CloseHandle
GetFileType
cryptui
WizardFree
CryptUIStartCertMgr
DllRegisterServer
LocalEnroll
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
WizardFree
DllUnregisterServer
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE