Static task
static1
Behavioral task
behavioral1
Sample
b81a384d9607947ff2cbb9082cd1f0b335979265bbd1a6380975c7b102db1ab8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b81a384d9607947ff2cbb9082cd1f0b335979265bbd1a6380975c7b102db1ab8.exe
Resource
win10v2004-20220812-en
General
-
Target
b81a384d9607947ff2cbb9082cd1f0b335979265bbd1a6380975c7b102db1ab8
-
Size
108KB
-
MD5
b54affd7d5abe286bccde7ac3384d8c3
-
SHA1
7abeb97f8378bc07db56e55b19c6dd28209c9051
-
SHA256
b81a384d9607947ff2cbb9082cd1f0b335979265bbd1a6380975c7b102db1ab8
-
SHA512
1c89cc60c6b6f7380f3af0b35a1a21912ee98f3c7cf195537cfb383bc57af701aa8474e1f81e5571549deceb94b4d660faf1a211db91b7fd9df5d7600d7242fc
-
SSDEEP
3072:Yz97BOeCiqsqKj8AVxuKamEhe6pjA6BEUL5k:WMdifqKAwx72115k
Malware Config
Signatures
Files
-
b81a384d9607947ff2cbb9082cd1f0b335979265bbd1a6380975c7b102db1ab8.exe windows x86
355e626fd708c2c9026c4afa4da3cbc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetVersion
GetCurrentDirectoryA
VirtualAlloc
FindAtomW
ExitProcess
SetLastError
EnterCriticalSection
GetCommandLineA
SetEndOfFile
DeleteFileA
SetLastError
SuspendThread
GetEnvironmentVariableA
CreateFileA
HeapSize
SetFileAttributesW
WaitForSingleObject
GetFileAttributesA
DeleteAtom
GetFileSize
ReadFile
GetModuleHandleA
IsBadReadPtr
CloseHandle
cryptui
CryptUIWizImport
LocalEnroll
CryptUIDlgViewContext
WizardFree
LocalEnrollNoDS
CryptUIWizExport
CryptUIDlgFreeCAContext
DllRegisterServer
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIWizDigitalSign
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ