Static task
static1
Behavioral task
behavioral1
Sample
b0f5ed5a60f549a3c520c5286de9b1153fbf36b1f79424c43801c7817529ea5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0f5ed5a60f549a3c520c5286de9b1153fbf36b1f79424c43801c7817529ea5f.exe
Resource
win10v2004-20220812-en
General
-
Target
b0f5ed5a60f549a3c520c5286de9b1153fbf36b1f79424c43801c7817529ea5f
-
Size
305KB
-
MD5
0371a7308fc4e03a6efdb7a64ed24fd0
-
SHA1
81d896c70ba73df05df9fb2d3881b8582fec2ed3
-
SHA256
b0f5ed5a60f549a3c520c5286de9b1153fbf36b1f79424c43801c7817529ea5f
-
SHA512
3fcfd98bc008661dc894a5bcf0f7767c5092c281e173a5bfa5b1c0417f39dc7fda19d3e5487d7bcf5d4a7b1623241e866e3d0e142f569eecf0c170fbfa28a99e
-
SSDEEP
6144:FIJbULT8NZBYEJ+3eTmSKJrFOTk2UgjCkw+RFYudbOOMe:FIpi4NZ6EJ+SmSKJrsTkQDo9O
Malware Config
Signatures
Files
-
b0f5ed5a60f549a3c520c5286de9b1153fbf36b1f79424c43801c7817529ea5f.exe windows x86
4f8351244d52d1c30ceef684de76f0d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomW
CloseHandle
SetFileAttributesW
GetEnvironmentVariableA
VirtualAlloc
SetLastError
DeleteAtom
DeleteFileA
ExitProcess
WaitForSingleObject
GetCommandLineA
GetFileAttributesA
GetCurrentDirectoryA
SetEndOfFile
GetModuleHandleA
GetFileSize
EnterCriticalSection
CreateFileA
GetStdHandle
HeapSize
SuspendThread
SetLastError
ReadFile
GetVersion
IsBadReadPtr
cryptui
LocalEnroll
CryptUIWizImport
LocalEnrollNoDS
DllRegisterServer
CryptUIWizExport
WizardFree
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
DllUnregisterServer
CryptUIDlgViewContext
CryptUIWizBuildCTL
WizardFree
CryptUIStartCertMgr
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ