Static task
static1
Behavioral task
behavioral1
Sample
6a4eb03facd42f0947104360b7cb35261643a5a2a86e1e3d3d63e1654887d062.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a4eb03facd42f0947104360b7cb35261643a5a2a86e1e3d3d63e1654887d062.exe
Resource
win10v2004-20220901-en
General
-
Target
6a4eb03facd42f0947104360b7cb35261643a5a2a86e1e3d3d63e1654887d062
-
Size
61KB
-
MD5
6c4510ceac545a4fa426f592b2fb2203
-
SHA1
6709a6ac70dd136e32ff5a4caecf706afc46062d
-
SHA256
6a4eb03facd42f0947104360b7cb35261643a5a2a86e1e3d3d63e1654887d062
-
SHA512
d5c71231c27c273607b4706226949e30bd3c55c7ab6f86ea157abe64622caa009765c567432a79622e32a953194d809a7d392ff8cee7fc682e23d61246b97eb4
-
SSDEEP
1536:O72WGfaXYGIVTgVgeG3MCLrkvLOf9e+uCHD:OKUKvFrkDOf9e+uoD
Malware Config
Signatures
Files
-
6a4eb03facd42f0947104360b7cb35261643a5a2a86e1e3d3d63e1654887d062.exe windows x86
fb13aeb767683e6ef383210104854e54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetVersion
DeleteAtom
WaitForSingleObject
VirtualAlloc
SetLastError
CloseHandle
SuspendThread
CreateFileA
GetStdHandle
SetLastError
GetFileSize
GetModuleHandleA
GetCurrentDirectoryA
DeleteFileA
EnterCriticalSection
GetEnvironmentVariableA
SetFileAttributesW
SetEndOfFile
ExitProcess
ReadFile
FindAtomW
GetFileAttributesA
GetCommandLineA
IsBadReadPtr
cryptui
LocalEnrollNoDS
CryptUIWizImport
LocalEnroll
WizardFree
CryptUIWizBuildCTL
DllUnregisterServer
WizardFree
DllRegisterServer
CryptUIStartCertMgr
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE