Static task
static1
Behavioral task
behavioral1
Sample
e153c76d19819304e0801d602995de0def2b0e08a2a3a745849bdfd682952711.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e153c76d19819304e0801d602995de0def2b0e08a2a3a745849bdfd682952711.exe
Resource
win10v2004-20220901-en
General
-
Target
e153c76d19819304e0801d602995de0def2b0e08a2a3a745849bdfd682952711
-
Size
302KB
-
MD5
1981cf08d6079abf57fb2156adcd5779
-
SHA1
47dab3bdf5a2ee28ed165f6d4dd231f04baa6f3f
-
SHA256
e153c76d19819304e0801d602995de0def2b0e08a2a3a745849bdfd682952711
-
SHA512
444a7d3eb88d7362905c5c361e645c92142b99d238042e3d582b884d02840a02d3eb11b2fd80212d814faa5f2ddff8956bacb88de33e9c31c9ee553de1e41bab
-
SSDEEP
6144:+fL8lOW90RvMmYr/GzoUdObUNoWGH9qkcRJXZ:+fLiOA0RvMmW/GzorbRWGdqkcXX
Malware Config
Signatures
Files
-
e153c76d19819304e0801d602995de0def2b0e08a2a3a745849bdfd682952711.exe windows x86
c1721529a2923e4d419f48bf7c6c9a54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
ReleaseSemaphore
GetStdHandle
CreateMutexA
HeapSize
RemoveDirectoryW
RemoveDirectoryW
GetStartupInfoA
CreateHardLinkA
GetVersion
FatalExit
DeleteFileA
CreateFileA
lstrlenW
MapViewOfFile
VirtualProtect
ReleaseMutex
GetFileSize
HeapDestroy
SetLastError
ReadConsoleA
ReleaseSemaphore
SetLastError
CreateDirectoryW
LoadLibraryA
cryptui
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIStartCertMgr
WizardFree
CryptUIWizExport
CryptUIDlgViewContext
CryptUIWizImport
WizardFree
LocalEnroll
DllUnregisterServer
CryptUIDlgFreeCAContext
DllRegisterServer
CryptUIWizBuildCTL
mf3216
ConvertEmfToWmf
Mf3216DllInitialize
Mf3216DllInitialize
ConvertEmfToWmf
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE