Static task
static1
Behavioral task
behavioral1
Sample
2353ed5fcdfb2deaf0813384e8d3a0a112b08534d7a564353e4074f2280ec59e.exe
Resource
win7-20220812-en
General
-
Target
2353ed5fcdfb2deaf0813384e8d3a0a112b08534d7a564353e4074f2280ec59e
-
Size
101KB
-
MD5
0f4f26802d8dee26d4c564616619158c
-
SHA1
a2661c4bc3f041ed0d2e5dec7bb2e51a3b87ead6
-
SHA256
2353ed5fcdfb2deaf0813384e8d3a0a112b08534d7a564353e4074f2280ec59e
-
SHA512
8fe9cc724dcdb599cd0493f7b1cfe1f2a299f6b775f0b05a42ce744753450c69243fb7cc3cfc926a3b07bbd096a7b4c6a9a5dd73549ecaa236a41bc587911c44
-
SSDEEP
3072:2oAGg8d0TFPeucb62NP4i5LPFjQaxa27:5gE0ZebW2CmLtjQaQ2
Malware Config
Signatures
Files
-
2353ed5fcdfb2deaf0813384e8d3a0a112b08534d7a564353e4074f2280ec59e.exe windows x86
d207b25a41f19d4fcfaa794752eaf05e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_adjust_fdiv
wcstoul
_exit
_XcptFilter
exit
__p___winitenv
wcslen
__wgetmainargs
_initterm
__setusermatherr
_wtol
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_wtoi
malloc
free
_wcsnicmp
_wcsicmp
wprintf
vwprintf
towupper
kernel32
LoadLibraryA
GetProcAddress
WriteFile
GetModuleHandleA
CloseHandle
UnmapViewOfFile
Sleep
FreeLibrary
GetFileSize
CreateFileMappingA
MapViewOfFile
GetVersionExA
LocalAlloc
SetLastError
MultiByteToWideChar
LocalFree
GetLastError
WideCharToMultiByte
CreateFileA
CreateFileW
cryptui
CryptUIWizDigitalSign
mssign32
SignError
SignerCreateTimeStampRequest
SignerAddTimeStampResponse
SignerTimeStamp
SignerSign
crypt32
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
user32
LoadStringW
LoadStringA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE