Static task
static1
Behavioral task
behavioral1
Sample
a7ac976208d84190894111671d83ac06756b1b72ab3f4619153f7f1f6c16f910.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7ac976208d84190894111671d83ac06756b1b72ab3f4619153f7f1f6c16f910.exe
Resource
win10v2004-20221111-en
General
-
Target
a7ac976208d84190894111671d83ac06756b1b72ab3f4619153f7f1f6c16f910
-
Size
198KB
-
MD5
5b2e672093d68ffc1de62c83404d1c52
-
SHA1
2a9c2b24cbc6c6930eb4e96d550cae9de81eb21b
-
SHA256
a7ac976208d84190894111671d83ac06756b1b72ab3f4619153f7f1f6c16f910
-
SHA512
9cacf5d0f76ef618dc1d9c13e6240a8c0aacf82a27cb62cf3777d0885931517f649715bc57242be34d444a857a36625da5dfdb7673cfa91af917735c08d7364b
-
SSDEEP
6144:pwyqvWWd8tMv4cyfHbVF3B569E8Zn6syK6mGkpk:ayqnwMQcOHbfn69EKp7pk
Malware Config
Signatures
Files
-
a7ac976208d84190894111671d83ac06756b1b72ab3f4619153f7f1f6c16f910.exe windows x86
8868d4c542133f05ea28cc06cd1f95f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
ResumeThread
SetLastError
GetCurrentDirectoryA
EnterCriticalSection
GetModuleHandleA
CloseHandle
GetStdHandle
SetFileAttributesA
GetCommandLineA
GetFileAttributesA
SetLastError
DeleteAtom
VirtualAlloc
IsBadReadPtr
GetVersion
CreateFileA
SetEndOfFile
GetExitCodeThread
ExitProcess
GetFileSize
HeapSize
WaitForSingleObject
FindAtomW
DeleteFileA
cryptui
CryptUIWizExport
CryptUIWizBuildCTL
CryptUIWizDigitalSign
WizardFree
LocalEnroll
CryptUIWizImport
CryptUIDlgFreeCAContext
DllUnregisterServer
LocalEnrollNoDS
WizardFree
CryptUIDlgViewContext
DllRegisterServer
CryptUIStartCertMgr
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ