Static task
static1
Behavioral task
behavioral1
Sample
aa184fbb70448958c1fc0a67de3294eb638bad729bf33727f17226b873714fdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa184fbb70448958c1fc0a67de3294eb638bad729bf33727f17226b873714fdf.exe
Resource
win10v2004-20220812-en
General
-
Target
aa184fbb70448958c1fc0a67de3294eb638bad729bf33727f17226b873714fdf
-
Size
768KB
-
MD5
f198551c45272bab0dbb4916ddbfd212
-
SHA1
915e92ce48a5e572979ec9aed6b1391716fd7e7a
-
SHA256
aa184fbb70448958c1fc0a67de3294eb638bad729bf33727f17226b873714fdf
-
SHA512
5e391ca626e2e80e7b439bb32a1b96ac6c1f9bfaa776bf1e1e6aa349ca16df1087a35acb3f9c261a3e698eb74f59bd46e9133980c3889e2ad7f61cc7233bce9c
-
SSDEEP
24576:xvguZkk2Yc1u+FSMP+hEmAIV4gp+BL3/:RKlElM2ygkd3/
Malware Config
Signatures
Files
-
aa184fbb70448958c1fc0a67de3294eb638bad729bf33727f17226b873714fdf.exe windows x86
d8eac32afa26bae62105b023be9ae4bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
RemoveDirectoryW
CreateMutexA
OpenEventW
LoadLibraryA
HeapDestroy
CreateFileMappingW
ReleaseSemaphore
CreateDirectoryW
CreateFileA
SetLastError
ReleaseMutex
VirtualProtect
GetCommandLineW
RemoveDirectoryW
FatalExit
MapViewOfFile
HeapSize
ReleaseSemaphore
SetLastError
GetStartupInfoA
lstrlenA
DeleteFileA
GetStdHandle
GetVersion
cryptui
CryptUIDlgFreeCAContext
WizardFree
LocalEnroll
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIWizDigitalSign
WizardFree
CryptUIWizExport
LocalEnrollNoDS
DllRegisterServer
DllUnregisterServer
CryptUIWizImport
CryptUIDlgViewContext
iernonce
RunOnceExProcess
RunOnceExProcess
InitCallback
InitCallback
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE