Static task
static1
Behavioral task
behavioral1
Sample
5e22c544cfa756988a1f01e067396c52dff54ea08f9c084bb630d890c2737a29.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5e22c544cfa756988a1f01e067396c52dff54ea08f9c084bb630d890c2737a29.exe
Resource
win10v2004-20220812-en
General
-
Target
5e22c544cfa756988a1f01e067396c52dff54ea08f9c084bb630d890c2737a29
-
Size
768KB
-
MD5
be14e7ec7b070cdf020e9cd01d57baf9
-
SHA1
ad7c4a762def56d563c391f9fdb5a50e4d3c32db
-
SHA256
5e22c544cfa756988a1f01e067396c52dff54ea08f9c084bb630d890c2737a29
-
SHA512
318e39204e807d4c0b8db8c01d3bbeab9b590b03cdaf8894cc0f36554f882d32b39083443198e086b1d3f4a4f671ad5074d5dc2a1ca265bed2ddf80371f39a58
-
SSDEEP
12288:KOR0BkfwSCfYIgQ577K6ud9J0AhK4QzzQmBWjL52mWKAO4s3T3aDe3C:T3YLQIL56nJ08K7zkUmWDOMF
Malware Config
Signatures
Files
-
5e22c544cfa756988a1f01e067396c52dff54ea08f9c084bb630d890c2737a29.exe windows x86
aeff774a36c7490bac6a246beb90487f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetVersion
ReleaseSemaphore
GetTickCount
CreateFileA
SetLastError
CreateHardLinkA
LoadLibraryA
ReleaseSemaphore
RemoveDirectoryW
RemoveDirectoryW
CreateMutexA
HeapDestroy
GetStartupInfoA
VirtualProtect
ReadConsoleA
GetFileSize
lstrlenW
MapViewOfFile
DeleteFileA
SetLastError
GetStdHandle
HeapSize
FatalExit
CreateDirectoryW
cryptui
CryptUIWizDigitalSign
CryptUIStartCertMgr
CryptUIWizExport
WizardFree
CryptUIWizBuildCTL
WizardFree
LocalEnrollNoDS
DllUnregisterServer
LocalEnroll
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
DllRegisterServer
CryptUIWizImport
mf3216
Mf3216DllInitialize
ConvertEmfToWmf
Mf3216DllInitialize
ConvertEmfToWmf
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE