Static task
static1
Behavioral task
behavioral1
Sample
ce83cd27d02afed0e62cd54c1c730443a4935870510eebe8aa3643cf913daac5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce83cd27d02afed0e62cd54c1c730443a4935870510eebe8aa3643cf913daac5.exe
Resource
win10v2004-20221111-en
General
-
Target
ce83cd27d02afed0e62cd54c1c730443a4935870510eebe8aa3643cf913daac5
-
Size
75KB
-
MD5
a14e9eba646af29464b7d2567747de0a
-
SHA1
604648c827739a5ecfb7c7938af6f8d1d58c3ab9
-
SHA256
ce83cd27d02afed0e62cd54c1c730443a4935870510eebe8aa3643cf913daac5
-
SHA512
e62da9b0b23fa14bc6b4b9b0387563cf95a8ff4080c91b7d748e679b222b3f8a1fa1c14d2a219b35a69fff3466f678b940cd92bd33a49f398eac717138b802d0
-
SSDEEP
1536:2/FAw449CvvR79thUvILdYSe+d63+pWU0bM4SUF5Cibht0jwOuNEA9hbrKlFh/yO:2VKKXPL0XuNLvvKlL5
Malware Config
Signatures
Files
-
ce83cd27d02afed0e62cd54c1c730443a4935870510eebe8aa3643cf913daac5.exe windows x86
fc97113a9494e44e4d63076b87c5b6f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetEnvironmentVariableA
GetStdHandle
ExitProcess
GetVersion
SetLastError
SuspendThread
DeleteAtom
CloseHandle
GetModuleHandleA
SetLastError
FindAtomW
CreateFileA
GetFileAttributesA
GetCurrentDirectoryA
IsBadReadPtr
VirtualAlloc
ReadFile
SetEndOfFile
WaitForSingleObject
GetFileSize
EnterCriticalSection
SetFileAttributesW
DeleteFileA
HeapSize
cryptui
LocalEnrollNoDS
LocalEnroll
CryptUIDlgViewContext
CryptUIWizBuildCTL
WizardFree
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
CryptUIWizExport
CryptUIWizImport
DllRegisterServer
CryptUIStartCertMgr
WizardFree
DllUnregisterServer
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ