Static task
static1
Behavioral task
behavioral1
Sample
ee93f7c449b05c1c348dbee4ba24c53c0fd41c9be105cd72efb65df5d834bcbc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ee93f7c449b05c1c348dbee4ba24c53c0fd41c9be105cd72efb65df5d834bcbc.exe
Resource
win10v2004-20220812-en
General
-
Target
ee93f7c449b05c1c348dbee4ba24c53c0fd41c9be105cd72efb65df5d834bcbc
-
Size
769KB
-
MD5
056ca632252c0342a437d135ff51cbd2
-
SHA1
4ec41418c855ccdf9ec304e7971abb52a8d29db2
-
SHA256
ee93f7c449b05c1c348dbee4ba24c53c0fd41c9be105cd72efb65df5d834bcbc
-
SHA512
13c7c734c80c574492717f272d7945c2017d98b8a0c60ec7a74369eba31626fb69f0c9dc16407fed8cd5adda6d8a1c1d4298cf3aa8a4d323f3c1ea29cdd0c984
-
SSDEEP
12288:th2Fxky6BzlktDMCCRlR5wxbY/p61x5nUGKV1P0WUR0QgnpmhkEd4ehYqi9Fuph5:P2fZ6ct4uYBHV1MrWIkEd47Z9Fuf
Malware Config
Signatures
Files
-
ee93f7c449b05c1c348dbee4ba24c53c0fd41c9be105cd72efb65df5d834bcbc.exe windows x86
ae59b7db6bfc07efb38114d18000ac38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
CreateFileA
CreateDirectoryW
GetVersion
MapViewOfFile
RemoveDirectoryW
HeapSize
LoadLibraryA
VirtualProtect
GetStdHandle
FatalExit
lstrlenW
HeapDestroy
RemoveDirectoryW
GetFileSize
DeleteFileA
ReleaseSemaphore
GetStartupInfoA
CreateHardLinkA
SetLastError
SetLastError
ReleaseMutex
CreateMutexA
GetTickCount
ReleaseSemaphore
cryptui
DllRegisterServer
LocalEnrollNoDS
WizardFree
CryptUIWizImport
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizDigitalSign
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
CryptUIWizExport
LocalEnroll
jsproxy
InternetInitializeAutoProxyDll
InternetInitializeAutoProxyDll
InternetGetProxyInfo
InternetGetProxyInfo
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE