Static task
static1
Behavioral task
behavioral1
Sample
4215f26de7253faa10ba17edabb8af454d2d4c4d95867b41743eea3fabcb494b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4215f26de7253faa10ba17edabb8af454d2d4c4d95867b41743eea3fabcb494b.exe
Resource
win10v2004-20220812-en
General
-
Target
4215f26de7253faa10ba17edabb8af454d2d4c4d95867b41743eea3fabcb494b
-
Size
395KB
-
MD5
329fa4a61cc4476acf518a465449ab20
-
SHA1
a9614d88b9f671d6d2518fc3dea10e29ecb5687e
-
SHA256
4215f26de7253faa10ba17edabb8af454d2d4c4d95867b41743eea3fabcb494b
-
SHA512
6359662204e6ccff7e51523da98b65ee24d7f88ec398e33a381e26690d9985e2e3beeec6a69d26dff521d0dc365957b1eb77d3a6e70c8afc502d2b034b195a5c
-
SSDEEP
12288:abLN8kZGFxIhHAtuJ/mFwzqLMChCnLBKLrG:abLOkZGFxIhEU/mDYCh4BKLrG
Malware Config
Signatures
Files
-
4215f26de7253faa10ba17edabb8af454d2d4c4d95867b41743eea3fabcb494b.exe windows x86
d36a83683ca39ce89a07580bcd6267c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cryptui
CryptUIWizDigitalSign
CryptUIDlgSelectCertificateFromStore
CryptUIDlgViewContext
CryptUIWizFreeDigitalSignContext
kernel32
GetNativeSystemInfo
SetTapeParameters
CreateSemaphoreA
CloseHandle
WideCharToMultiByte
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapReAlloc
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedExchange
LoadLibraryA
GetACP
GetOEMCP
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ