Static task
static1
Behavioral task
behavioral1
Sample
a3b64f984c0cbb3d1799ec0a9533a8476aec7cf45fed1e92b0fca28264130a0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3b64f984c0cbb3d1799ec0a9533a8476aec7cf45fed1e92b0fca28264130a0a.exe
Resource
win10v2004-20220901-en
General
-
Target
a3b64f984c0cbb3d1799ec0a9533a8476aec7cf45fed1e92b0fca28264130a0a
-
Size
749KB
-
MD5
24be75b8a5154e147bb8e2430f6a280e
-
SHA1
975815437b2987584b14e7e9576a9856a86d241e
-
SHA256
a3b64f984c0cbb3d1799ec0a9533a8476aec7cf45fed1e92b0fca28264130a0a
-
SHA512
37ecc9e97a025a945a5b469c36db8df8281f53e58a0ecd3ea3e71dde44ed81536ab7cfe152c8ae24004ab70767cf9f5644cba299f9b5f200c56801073e3432f4
-
SSDEEP
12288:J220atMaw5M9PRLNCTwLZAkbz4+gNMOJs0/9w2QFth/y1qDV2L7Ayzb5MxXbo1rv:J220aN1fzQ+gNMOJs0/9fUny1Me7Ayzp
Malware Config
Signatures
Files
-
a3b64f984c0cbb3d1799ec0a9533a8476aec7cf45fed1e92b0fca28264130a0a.exe windows x86
2a8aea46bccae5e10a11d3c890c5bb2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
SetVolumeLabelA
GetProcessHeap
FindAtomA
FindClose
CreateSemaphoreA
CloseHandle
HeapCreate
RemoveDirectoryA
WriteFile
GetDriveTypeW
GetModuleFileNameA
FatalExit
HeapFree
SetEndOfFile
ClearCommBreak
RemoveDirectoryA
DeleteAtom
WaitForMultipleObjects
CreateDirectoryA
CreatePipe
AddAtomA
GetCommandLineA
GetFileType
GetModuleHandleA
cryptui
LocalEnrollNoDS
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIStartCertMgr
DllRegisterServer
CryptUIWizDigitalSign
WizardFree
CryptUIDlgViewContext
WizardFree
CryptUIWizImport
CryptUIWizExport
LocalEnroll
CryptUIDlgFreeCAContext
mgmtapi
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE