Static task
static1
Behavioral task
behavioral1
Sample
2f98f2da34193a951ad04a8e48967b977357d180aa96408575dc05701099f111.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f98f2da34193a951ad04a8e48967b977357d180aa96408575dc05701099f111.exe
Resource
win10v2004-20220812-en
General
-
Target
2f98f2da34193a951ad04a8e48967b977357d180aa96408575dc05701099f111
-
Size
747KB
-
MD5
1047364b7a257ebf15dd43154f68968d
-
SHA1
1b9517b70e12c0a1b018d11ec1468b5518378da0
-
SHA256
2f98f2da34193a951ad04a8e48967b977357d180aa96408575dc05701099f111
-
SHA512
7b323e666d7a0681a05dfef5f33096b9b63fbbc7bcf38c0f86cbdc9fd345c79fa9e1e8631fc8eeb8638934d828f6f42d20763ed4abc91244a95b6fac4bad8456
-
SSDEEP
12288:GGGTNp0oOnIPxwuOM4OVtXJSixNVib/daZqmOxkXA0krgCZlHCL2PXj5dZCsN+K7:GTN+ofpUCn3BudaQmOV0kr/vHdPT5Z1n
Malware Config
Signatures
Files
-
2f98f2da34193a951ad04a8e48967b977357d180aa96408575dc05701099f111.exe windows x86
e79d08948cea8dd051b98d9bc91aaf5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForMultipleObjects
GetModuleHandleA
GetStdHandle
CancelIo
CreatePipe
HeapCreate
GetCurrentThreadId
GetCommandLineA
GlobalSize
ExitThread
GetCurrentDirectoryW
WriteFile
GetFileAttributesW
CreateDirectoryA
HeapFree
IsBadWritePtr
GetStdHandle
GetDriveTypeW
GetFileType
lstrlenW
FindClose
Beep
GetModuleFileNameA
CreateSemaphoreA
cryptui
WizardFree
DllUnregisterServer
CryptUIWizDigitalSign
LocalEnroll
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizImport
CryptUIWizBuildCTL
CryptUIWizExport
CryptUIStartCertMgr
WizardFree
LocalEnrollNoDS
CryptUIDlgViewContext
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE