Static task
static1
Behavioral task
behavioral1
Sample
85937d8175d244c1c08427a4bc053bd9fd008448ace880e57323338cf08e6bee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85937d8175d244c1c08427a4bc053bd9fd008448ace880e57323338cf08e6bee.exe
Resource
win10v2004-20220901-en
General
-
Target
85937d8175d244c1c08427a4bc053bd9fd008448ace880e57323338cf08e6bee
-
Size
75KB
-
MD5
a1e19a05352e96b93def8aa05ffa5c25
-
SHA1
5442cd6e4f43c38fd6cdd89be41a495341ca26e4
-
SHA256
85937d8175d244c1c08427a4bc053bd9fd008448ace880e57323338cf08e6bee
-
SHA512
2644333c178936f8449f2e69a22ceeda7bb24547c81df0112a1d850b42091ec5ae92efeb0dcda44c7f221ea7cf63b816d9788f8a70d857ae15ba5356a94e27af
-
SSDEEP
1536:Aqo2xkwMqlqn1ovl1pXNxGDWxBfXaC8aac9sWBr8WbcIwjBE9M3XZazlSlxUoGDp:DnYVhv3XZGlqx/GLrtX
Malware Config
Signatures
Files
-
85937d8175d244c1c08427a4bc053bd9fd008448ace880e57323338cf08e6bee.exe windows x86
72f41a1fbbe922549271e2401767a6f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
ExitProcess
SetFileAttributesA
GetCommandLineA
GetStdHandle
EnterCriticalSection
IsBadReadPtr
GetVersion
CloseHandle
VirtualAlloc
HeapSize
DeleteFileA
SetEndOfFile
FindAtomW
DeleteAtom
GetExitCodeThread
ResumeThread
SetLastError
GetCurrentDirectoryA
WaitForSingleObject
CreateFileA
SetLastError
GetModuleHandleA
GetFileSize
GetFileAttributesA
cryptui
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizImport
DllRegisterServer
CryptUIWizBuildCTL
DllUnregisterServer
LocalEnroll
WizardFree
LocalEnrollNoDS
CryptUIWizDigitalSign
WizardFree
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ