Static task
static1
Behavioral task
behavioral1
Sample
90ab897b1da608126367ec89e63ee57e837ae1fadda651edd4c91b6c7e4c6ebc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90ab897b1da608126367ec89e63ee57e837ae1fadda651edd4c91b6c7e4c6ebc.exe
Resource
win10v2004-20220812-en
General
-
Target
90ab897b1da608126367ec89e63ee57e837ae1fadda651edd4c91b6c7e4c6ebc
-
Size
769KB
-
MD5
09bd7d664c9bded76d7098ab955ba5a7
-
SHA1
0e5b98218b07746c4bc6f5ca6c761e7cb7ad736d
-
SHA256
90ab897b1da608126367ec89e63ee57e837ae1fadda651edd4c91b6c7e4c6ebc
-
SHA512
0802edfbbec02e7faca5d61ed26c2ed1ee1ccc55a00462cecae29a422cb574a6307ce5e17e988cc06cd4d73385fd70b759233cadeaba7ada112ac0a47a86b1cf
-
SSDEEP
12288:0ZGtOy8xDZHGQR8atUIeJz7O/ZM8dHpLmvW1RtW7QdD/VlsPXfvYZw48V:0ZAOl/UrIBM81EO1RtW7MD/VlGYZ78V
Malware Config
Signatures
Files
-
90ab897b1da608126367ec89e63ee57e837ae1fadda651edd4c91b6c7e4c6ebc.exe windows x86
5b62e57b907f498f62c13c2b331570da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
OpenEventW
GetStartupInfoA
ReleaseMutex
DeleteFileA
LoadLibraryA
ReleaseSemaphore
GetStdHandle
FatalExit
RemoveDirectoryW
GetCommandLineW
SetLastError
CreateFileA
HeapDestroy
GetVersion
CreateMutexA
CreateFileMappingW
GetFileSize
RemoveDirectoryW
CreateDirectoryW
VirtualProtect
SetLastError
lstrlenW
HeapSize
ReleaseSemaphore
cryptui
WizardFree
CryptUIWizDigitalSign
CryptUIWizBuildCTL
LocalEnrollNoDS
DllUnregisterServer
DllRegisterServer
CryptUIDlgFreeCAContext
LocalEnroll
CryptUIWizImport
CryptUIStartCertMgr
CryptUIDlgViewContext
CryptUIWizExport
WizardFree
imgutil
DecodeImage
CreateMIMEMap
DecodeImage
CreateMIMEMap
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE