Static task
static1
Behavioral task
behavioral1
Sample
f8322eaa320b99e1086dce6c521042e5ec0666663f8c78947c757099781e4da6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8322eaa320b99e1086dce6c521042e5ec0666663f8c78947c757099781e4da6.exe
Resource
win10v2004-20221111-en
General
-
Target
f8322eaa320b99e1086dce6c521042e5ec0666663f8c78947c757099781e4da6
-
Size
279KB
-
MD5
baa63d1c246d1fb6774ee29a7ec15a32
-
SHA1
b1b5ce7445000c529895f98acf1f0fa9a2830f5c
-
SHA256
f8322eaa320b99e1086dce6c521042e5ec0666663f8c78947c757099781e4da6
-
SHA512
2191a8d0c04ad4572c6c30887c467d8c6c265c0b925a4ab471a84cd054bc6f78230a830594cfdae9bc056c7aae450120e3d12d6b3aa7e881b594dd1d4780575e
-
SSDEEP
6144:9/ugmb8co5chRnXVH5k4TMlvEZQxWjg7k:ZuaORnFTCEmAj
Malware Config
Signatures
Files
-
f8322eaa320b99e1086dce6c521042e5ec0666663f8c78947c757099781e4da6.exe windows x86
7e608f8009f18801afb7a9f1fab0b0aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapFree
FindAtomA
CreatePipe
GetProcessHeap
ExitThread
FindClose
SetEndOfFile
WriteFile
GetFileType
GetDriveTypeW
ClearCommBreak
WaitForMultipleObjects
CreateDirectoryA
IsBadWritePtr
GetModuleFileNameA
GetCommandLineA
AddAtomA
CreateSemaphoreW
SetVolumeLabelA
DeleteAtom
RemoveDirectoryA
HeapCreate
RemoveDirectoryA
GetModuleHandleA
cryptui
CryptUIWizBuildCTL
CryptUIWizDigitalSign
DllRegisterServer
WizardFree
DllUnregisterServer
CryptUIStartCertMgr
CryptUIWizImport
CryptUIWizExport
CryptUIDlgViewContext
LocalEnroll
WizardFree
LocalEnrollNoDS
CryptUIDlgFreeCAContext
msrle32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE