Static task
static1
Behavioral task
behavioral1
Sample
5ada46f6ea57a17e339c748dc25167a8cdb4a960a0e05e579197bb39554507d0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ada46f6ea57a17e339c748dc25167a8cdb4a960a0e05e579197bb39554507d0.exe
Resource
win10v2004-20221111-en
General
-
Target
5ada46f6ea57a17e339c748dc25167a8cdb4a960a0e05e579197bb39554507d0
-
Size
745KB
-
MD5
5fd411a10857baad781483fd6fdcb8ea
-
SHA1
9eeb28593c060e39b6e6f266e4ab6b460e724f53
-
SHA256
5ada46f6ea57a17e339c748dc25167a8cdb4a960a0e05e579197bb39554507d0
-
SHA512
a46645ddfa1ab73c227d20ea1261c9bd97faab55e8393a9d8a2b131dec4d56f346383013520699d423f8ab0193fd7ab006377b41288b8d2278e688c19be21ec8
-
SSDEEP
12288:6BlTYgHb1GnE5JC68RzcULdLJk9c1U/e3z/LMTsw4m2lZZfOTydjv/4jHxNJsPgP:klkaxQEiJRgO1U/IzMTs/m2bZXX+RNYn
Malware Config
Signatures
Files
-
5ada46f6ea57a17e339c748dc25167a8cdb4a960a0e05e579197bb39554507d0.exe windows x86
429eff5cf93a8d2abe3e8198c1656dba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
SetLastError
SetEndOfFile
DeleteAtom
GetStdHandle
IsBadReadPtr
GetCurrentDirectoryA
FindAtomW
SuspendThread
GetVersion
DeleteFileA
HeapSize
EnterCriticalSection
ReadFile
GetCommandLineA
ExitProcess
GetFileSize
SetLastError
GetFileAttributesA
GetEnvironmentVariableA
VirtualAlloc
WaitForSingleObject
GetModuleHandleA
SetFileAttributesW
cryptui
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
WizardFree
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizExport
CryptUIWizBuildCTL
LocalEnrollNoDS
DllUnregisterServer
WizardFree
DllRegisterServer
LocalEnroll
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ