Static task
static1
Behavioral task
behavioral1
Sample
b355111c8e29feffe53213644fb92c383ac21616fffc04693e337170cf811de8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b355111c8e29feffe53213644fb92c383ac21616fffc04693e337170cf811de8.exe
Resource
win10v2004-20220812-en
General
-
Target
b355111c8e29feffe53213644fb92c383ac21616fffc04693e337170cf811de8
-
Size
768KB
-
MD5
0a5db8a63e6935d773473807e87f08cc
-
SHA1
2dadb7bdcab8cbc1a807f4f6032c55002c8ab3a8
-
SHA256
b355111c8e29feffe53213644fb92c383ac21616fffc04693e337170cf811de8
-
SHA512
9bcb7642c21a6af2d458034d820d5180349eb1ce55fb574f65ac10421a7383a26af9ef2e29660e0f6eb9b3ecdc8262ecee021b40e9325a34e631ea8bfbbbbeea
-
SSDEEP
12288:6vNOVJ6PTiNzOTZbv5cHdT9W7vLptrWZXYxOr8KvoQgZqnfi3aD:3VJgWxOlr5c9avLplWZCOr8Kvo4Q
Malware Config
Signatures
Files
-
b355111c8e29feffe53213644fb92c383ac21616fffc04693e337170cf811de8.exe windows x86
d59ab0ce6f825923a602a5f8fc4a2d6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetCommandLineW
ReleaseSemaphore
GetStdHandle
FatalExit
GetVersion
lstrlenA
OpenEventW
DeleteFileA
VirtualProtect
RemoveDirectoryW
CreateFileMappingW
GetStartupInfoA
ReleaseMutex
CreateFileA
RemoveDirectoryW
MapViewOfFile
SetLastError
HeapSize
CreateDirectoryW
ReleaseSemaphore
GetFileSize
HeapDestroy
SetLastError
CreateMutexA
cryptui
LocalEnroll
WizardFree
CryptUIWizDigitalSign
CryptUIWizBuildCTL
LocalEnrollNoDS
CryptUIWizImport
CryptUIDlgFreeCAContext
WizardFree
DllRegisterServer
CryptUIStartCertMgr
CryptUIDlgViewContext
DllUnregisterServer
CryptUIWizExport
iernonce
RunOnceExProcess
InitCallback
InitCallback
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE