CryModuleGetMemoryInfo
Static task
static1
Behavioral task
behavioral1
Sample
7065eda0c5c6542af45ebed0c3484bca.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7065eda0c5c6542af45ebed0c3484bca.exe
Resource
win10v2004-20230703-en
General
-
Target
7065eda0c5c6542af45ebed0c3484bca
-
Size
1.3MB
-
MD5
7065eda0c5c6542af45ebed0c3484bca
-
SHA1
f33be26adad658f4f620f1dd817dd2cc37175493
-
SHA256
95e88fab1c0a1be73b9807dbf7211f6d08f9109544253117e5ac3ba0430a3fc6
-
SHA512
2b246f9559f7b3d5597ed9eff3be9252113e45d5be3602ba9e547424bc2fd4dbd9528e6788f17454b8478e291ba9564da638a8cb0c57cef231b2c85330cbfd62
-
SSDEEP
24576:95kx4IvvHH+WhAGNKvOeytm6eBvs+MONXUKFs2n1GIne3O3Gymd9fXV:95kCqHH+eAGNXeR/taKiE0NO3GXjfXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7065eda0c5c6542af45ebed0c3484bca
Files
-
7065eda0c5c6542af45ebed0c3484bca.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bpkzblrg Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vhvywwdm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE