Static task
static1
Behavioral task
behavioral1
Sample
2aabfef1e65a269a815b1b5c3e697fe9a38f6c05478af49c31475c6cf799639e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2aabfef1e65a269a815b1b5c3e697fe9a38f6c05478af49c31475c6cf799639e.exe
Resource
win10v2004-20220812-en
General
-
Target
2aabfef1e65a269a815b1b5c3e697fe9a38f6c05478af49c31475c6cf799639e
-
Size
769KB
-
MD5
08835e380a83f0409d64cd6c055d08e1
-
SHA1
d2439eda3a4656b1b8a13ca3cba0c4bd2ca387f5
-
SHA256
2aabfef1e65a269a815b1b5c3e697fe9a38f6c05478af49c31475c6cf799639e
-
SHA512
b193d0f01d7662386d5e7d172f5d62fbe764cd0368baba88cf033c882d67c46bc3e2b5a710c77c8da26c8ce0998b1dbfa745e8bb8c348d618a7e0d93b71f6380
-
SSDEEP
24576:zZPxEpPIBR9Yr2lbJFXTIN6Gm5kq5DXQ1b:Nep+Yr2pJhy05hlXG
Malware Config
Signatures
Files
-
2aabfef1e65a269a815b1b5c3e697fe9a38f6c05478af49c31475c6cf799639e.exe windows x86
0c42f40e29a15ace98b4d0cf8e868d0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
VirtualProtect
HeapDestroy
lstrlenW
CreateFileA
RemoveDirectoryW
CreateMutexA
RemoveDirectoryW
GetVersion
MapViewOfFile
FatalExit
HeapSize
ReleaseSemaphore
ReleaseMutex
ReadConsoleA
ReleaseSemaphore
GetStartupInfoA
SetLastError
CreateHardLinkA
DeleteFileA
GetTickCount
GetStdHandle
LoadLibraryA
CreateDirectoryW
GetFileSize
cryptui
CryptUIWizExport
CryptUIWizDigitalSign
LocalEnrollNoDS
DllRegisterServer
LocalEnroll
WizardFree
CryptUIStartCertMgr
DllUnregisterServer
WizardFree
CryptUIWizBuildCTL
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
CryptUIWizImport
imgutil
DecodeImage
CreateMIMEMap
CreateMIMEMap
DecodeImage
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE