Static task
static1
Behavioral task
behavioral1
Sample
ad11fc3a874eddd4314b547fef87dd1b1cf9b0f7b760f1cb96c2b9a7a38575b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad11fc3a874eddd4314b547fef87dd1b1cf9b0f7b760f1cb96c2b9a7a38575b2.exe
Resource
win10v2004-20220812-en
General
-
Target
ad11fc3a874eddd4314b547fef87dd1b1cf9b0f7b760f1cb96c2b9a7a38575b2
-
Size
768KB
-
MD5
b5eebdbe0704b308dfc1a145a142e2e8
-
SHA1
9ebae23db7026b12dca599a1da2940b01931d360
-
SHA256
ad11fc3a874eddd4314b547fef87dd1b1cf9b0f7b760f1cb96c2b9a7a38575b2
-
SHA512
2082e887e6d6940f23c36e4709ad535b589cb2acb2d89873013f1b73f0f87fa6135e64e51326463b541ecd4824d89ed5c48a8774d8ef997209c210a7adc397b3
-
SSDEEP
12288:XdJlA3hcNTfGK022EgV22V9gssG/wopJBFBRPsPaXJ7LYWs2s32SYu:WRclM2cVKU5pJBF6aZ7LHs2s3
Malware Config
Signatures
Files
-
ad11fc3a874eddd4314b547fef87dd1b1cf9b0f7b760f1cb96c2b9a7a38575b2.exe windows x86
5a3f6250800146489c1242ce30493c93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
CreateFileMappingW
RemoveDirectoryW
SetLastError
GetStdHandle
GetStartupInfoA
MapViewOfFile
GetVersion
DeleteFileA
SetLastError
FatalExit
ReleaseMutex
OpenEventW
lstrlenA
CreateMutexA
HeapSize
ReleaseSemaphore
HeapDestroy
GetFileSize
LoadLibraryA
GetCommandLineW
CreateDirectoryW
CreateFileA
RemoveDirectoryW
VirtualProtect
cryptui
WizardFree
LocalEnrollNoDS
DllRegisterServer
WizardFree
CryptUIStartCertMgr
CryptUIWizDigitalSign
CryptUIWizImport
DllUnregisterServer
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
LocalEnroll
CryptUIDlgViewContext
iernonce
RunOnceExProcess
RunOnceExProcess
InitCallback
InitCallback
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE