Static task
static1
Behavioral task
behavioral1
Sample
1913250e96f51316d50688a68615bb7352dee8e2c76089f2e712a8a14bb25cfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1913250e96f51316d50688a68615bb7352dee8e2c76089f2e712a8a14bb25cfc.exe
Resource
win10v2004-20221111-en
General
-
Target
1913250e96f51316d50688a68615bb7352dee8e2c76089f2e712a8a14bb25cfc
-
Size
305KB
-
MD5
12cf17296fd44870fd4b7c43af845067
-
SHA1
32a0a3b41c343d83abc55a8f903c058ced9e24ef
-
SHA256
1913250e96f51316d50688a68615bb7352dee8e2c76089f2e712a8a14bb25cfc
-
SHA512
99f6e553b3fe0decc0bf6de69ae04f029f471b9c528ef019af9d96b706fc2b6db90c8e8b29d22eceab2399fa940578574486792478c9d19907ec920a14491ca7
-
SSDEEP
6144:CIJR6r9Bw8NuUdnKHRWlkj/OSQd8De8WAzC91MSqJ+1wZ:CIy9ZNFnKxWlUQdUeVBcxE1wZ
Malware Config
Signatures
Files
-
1913250e96f51316d50688a68615bb7352dee8e2c76089f2e712a8a14bb25cfc.exe windows x86
ad7ce68b4404481e9d1be2cc33076fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
ExitProcess
GetFileAttributesA
SetFileAttributesW
FindAtomW
ReadFile
SetEndOfFile
GetCurrentDirectoryA
GetEnvironmentVariableA
CreateFileA
DeleteAtom
GetModuleHandleA
DeleteFileA
SetLastError
GetStdHandle
GetVersion
SetLastError
WaitForSingleObject
HeapSize
GetCommandLineA
SuspendThread
CloseHandle
IsBadReadPtr
VirtualAlloc
EnterCriticalSection
cryptui
CryptUIWizExport
WizardFree
LocalEnroll
LocalEnrollNoDS
CryptUIWizImport
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
WizardFree
DllRegisterServer
CryptUIWizDigitalSign
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ