Static task
static1
Behavioral task
behavioral1
Sample
3830f3c4bd9987e4150eddc38e404b0c6aef064e272b48c854fac30cdfa599d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3830f3c4bd9987e4150eddc38e404b0c6aef064e272b48c854fac30cdfa599d8.exe
Resource
win10v2004-20220812-en
General
-
Target
3830f3c4bd9987e4150eddc38e404b0c6aef064e272b48c854fac30cdfa599d8
-
Size
768KB
-
MD5
136e43e3a6686096eb9b1adaca4137dd
-
SHA1
03a68e14628c999f9814ea334f2aef1dd1bc86d2
-
SHA256
3830f3c4bd9987e4150eddc38e404b0c6aef064e272b48c854fac30cdfa599d8
-
SHA512
3291b972ef5977f1ec0cd9af36b5b052905f5eb1a1dcfb48618365df994d6b81ddf5eadd0f08b2e33a50d00278e85a4f44d2300c47decf840c9dd1d2fbb9471e
-
SSDEEP
12288:dS99CKGcCW+H/+9gC0kXbYiZmsv1M/jkMJOBGYDsnLv467oVmhSNqRM0X0:o6tcCW8/+9geBwsNDMgBn6b+qRjX
Malware Config
Signatures
Files
-
3830f3c4bd9987e4150eddc38e404b0c6aef064e272b48c854fac30cdfa599d8.exe windows x86
e5a210eab458c22c6cd4a7927ec06f7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
FatalExit
GetFileSize
CreateFileA
GetStartupInfoA
CreateDirectoryW
LoadLibraryA
CreateMutexA
CreateFileMappingW
SetLastError
SetLastError
GetCommandLineW
GetStdHandle
RemoveDirectoryW
ReleaseSemaphore
RemoveDirectoryW
ReleaseMutex
ReleaseSemaphore
lstrlenA
MapViewOfFile
OpenEventW
GetVersion
DeleteFileA
HeapDestroy
HeapSize
cryptui
CryptUIDlgFreeCAContext
LocalEnroll
DllUnregisterServer
CryptUIDlgViewContext
WizardFree
CryptUIWizImport
CryptUIWizExport
CryptUIWizBuildCTL
CryptUIStartCertMgr
LocalEnrollNoDS
DllRegisterServer
CryptUIWizDigitalSign
WizardFree
iernonce
InitCallback
InitCallback
RunOnceExProcess
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE