Static task
static1
Behavioral task
behavioral1
Sample
a2e8fd1a53736ccec1c98b0eaa67d7177c97748b08bc39ee65d821157c5ce8f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2e8fd1a53736ccec1c98b0eaa67d7177c97748b08bc39ee65d821157c5ce8f6.exe
Resource
win10v2004-20220812-en
General
-
Target
a2e8fd1a53736ccec1c98b0eaa67d7177c97748b08bc39ee65d821157c5ce8f6
-
Size
768KB
-
MD5
104097c794a069766d9a6460d04a66e7
-
SHA1
0e5a096efbeb4c26260eab8f8b8fc5189fbaaa4e
-
SHA256
a2e8fd1a53736ccec1c98b0eaa67d7177c97748b08bc39ee65d821157c5ce8f6
-
SHA512
9d7a22c1e60391b8aa04d27543bf0e30169445cdcc9b1234df8e278131efadfbc911f4706f17d98ee00203033a94873193f5b32b4bf56fa7a18b11f4c17122d2
-
SSDEEP
24576:exTs4+9LRFEQpKgz7DHA/IpUlOWdSCwesS1:+TsB9R/p1Lfq7dSCwes
Malware Config
Signatures
Files
-
a2e8fd1a53736ccec1c98b0eaa67d7177c97748b08bc39ee65d821157c5ce8f6.exe windows x86
81896019049716c3bf9e52b95eb5318f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
OpenEventW
SetLastError
RemoveDirectoryW
CreateFileMappingW
GetFileSize
SetLastError
ReleaseSemaphore
LoadLibraryA
MapViewOfFile
CreateDirectoryW
DeleteFileA
GetStdHandle
GetVersion
GetCommandLineW
HeapSize
lstrlenA
RemoveDirectoryW
FatalExit
VirtualProtect
HeapDestroy
GetStartupInfoA
CreateFileA
ReleaseSemaphore
ReleaseMutex
cryptui
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIWizImport
LocalEnroll
WizardFree
DllRegisterServer
WizardFree
CryptUIWizExport
DllUnregisterServer
CryptUIStartCertMgr
CryptUIWizDigitalSign
LocalEnrollNoDS
iernonce
InitCallback
RunOnceExProcess
InitCallback
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE