Static task
static1
Behavioral task
behavioral1
Sample
5bac686be8a8eb5fddf695a2ef2dab956b4076d930522677ac8af3832605b28c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5bac686be8a8eb5fddf695a2ef2dab956b4076d930522677ac8af3832605b28c.exe
Resource
win10v2004-20220901-en
General
-
Target
5bac686be8a8eb5fddf695a2ef2dab956b4076d930522677ac8af3832605b28c
-
Size
279KB
-
MD5
98e1e32e1879c813a7a48e8dd5c8b1ba
-
SHA1
920ac4135bd5d5f776673bf0ed7ad7bf9f6f2d2e
-
SHA256
5bac686be8a8eb5fddf695a2ef2dab956b4076d930522677ac8af3832605b28c
-
SHA512
d1896b669547227d06e9cfd9605bf3184e4a52b71421f65732e61b87154c41b274a48eacad315a80f35b7603686d9aaf90c04e7fdef442bab8219f9ebf4b9c13
-
SSDEEP
6144:Om9JRxDfTBRe8O4Iie4aG6UfIgw/OPYfbsS:XJ3DfT+97T46UwmwjsS
Malware Config
Signatures
Files
-
5bac686be8a8eb5fddf695a2ef2dab956b4076d930522677ac8af3832605b28c.exe windows x86
b1dcb68a8a1c10ab15e252b2b4e31cd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
CreateDirectoryA
CreateSemaphoreA
RemoveDirectoryA
SetEndOfFile
HeapCreate
CreatePipe
FindClose
GetDriveTypeW
AddAtomA
WaitForMultipleObjects
GetFileType
SetVolumeLabelA
GetModuleFileNameA
ClearCommBreak
HeapFree
WriteFile
CloseHandle
IsBadWritePtr
RemoveDirectoryA
GetCommandLineA
GetModuleHandleA
FindAtomA
GetProcessHeap
DeleteAtom
cryptui
CryptUIStartCertMgr
WizardFree
CryptUIWizImport
LocalEnroll
CryptUIWizExport
DllUnregisterServer
WizardFree
LocalEnrollNoDS
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIDlgViewContext
CryptUIWizDigitalSign
msisip
MsiSIPIsMyTypeOfFile
MsiSIPIsMyTypeOfFile
MsiSIPIsMyTypeOfFile
MsiSIPIsMyTypeOfFile
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE