Static task
static1
Behavioral task
behavioral1
Sample
0352aa6ac0e9fc11c1f86081eac3128723390cae97d850aa57d3e6aa00665885.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0352aa6ac0e9fc11c1f86081eac3128723390cae97d850aa57d3e6aa00665885.exe
Resource
win10v2004-20220901-en
General
-
Target
0352aa6ac0e9fc11c1f86081eac3128723390cae97d850aa57d3e6aa00665885
-
Size
769KB
-
MD5
1045a857d45805fb99bec9b788044994
-
SHA1
5af3986c77debc8a9a04c1ffafc3e605b94613ea
-
SHA256
0352aa6ac0e9fc11c1f86081eac3128723390cae97d850aa57d3e6aa00665885
-
SHA512
28668d00b0948279d814066f168339e2b3e9b8f7b2ae7e164ffe354f5adb7c339f625616f970af605133d80f3cbb2c1d1932d8b6aca0822110fcd890642260b5
-
SSDEEP
12288:g682JKmjuUYEAXyik/ZmJiYDlLXw4ZeKoOPe+GXCLuNirK0xw00Oj:gTfmjpSX+/D+XwrMPqyLuZ0u0v
Malware Config
Signatures
Files
-
0352aa6ac0e9fc11c1f86081eac3128723390cae97d850aa57d3e6aa00665885.exe windows x86
fb2bde8386b9cc76f17ca9f11f0bb99e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
SetLastError
GetCommandLineW
MapViewOfFile
LoadLibraryA
HeapSize
CreateDirectoryW
GetVersion
FatalExit
GetStartupInfoA
ReleaseSemaphore
VirtualProtect
DeleteFileA
HeapDestroy
SetLastError
lstrlenW
RemoveDirectoryW
OpenEventW
ReleaseSemaphore
GetFileSize
ReleaseMutex
CreateFileA
RemoveDirectoryW
CreateFileMappingW
GetStdHandle
cryptui
CryptUIDlgFreeCAContext
DllRegisterServer
CryptUIWizBuildCTL
CryptUIWizExport
WizardFree
LocalEnrollNoDS
CryptUIStartCertMgr
CryptUIWizImport
DllUnregisterServer
CryptUIDlgViewContext
WizardFree
CryptUIWizDigitalSign
LocalEnroll
imgutil
CreateMIMEMap
DecodeImage
CreateMIMEMap
DecodeImage
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE