Static task
static1
Behavioral task
behavioral1
Sample
2ae5933048fea0c49ff6800e19f481ba2a9d7f1c70e5453fddbb42a715389fcc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2ae5933048fea0c49ff6800e19f481ba2a9d7f1c70e5453fddbb42a715389fcc.exe
Resource
win10v2004-20220901-en
General
-
Target
2ae5933048fea0c49ff6800e19f481ba2a9d7f1c70e5453fddbb42a715389fcc
-
Size
101KB
-
MD5
e85cd7377c4ea7a5a63924fadadd1c25
-
SHA1
874760fc907329f3839aa2d4f309b1ab15c30f1e
-
SHA256
2ae5933048fea0c49ff6800e19f481ba2a9d7f1c70e5453fddbb42a715389fcc
-
SHA512
e2b3210ac5f79ac43cba34bba269499f849080c3ffd7754d024c358fb91f16922628acf2ac68d0ce1a68433f3ced4bf47715f64d6ae3d7b53e39f9abd33b0cc5
-
SSDEEP
3072:EkOP28Lmlu85Y6kKyPuu7Rkm/aqC5P+E7skeF/:EhPWVkKhu7d/3/
Malware Config
Signatures
Files
-
2ae5933048fea0c49ff6800e19f481ba2a9d7f1c70e5453fddbb42a715389fcc.exe windows x86
be6d1ee29705c03c3c93c557032f47ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
FindAtomW
SetEndOfFile
CloseHandle
ReadFile
DeleteAtom
SuspendThread
GetVersion
EnterCriticalSection
GetModuleHandleA
GetFileSize
WaitForSingleObject
ExitProcess
GetCurrentDirectoryA
GetFileAttributesA
VirtualAlloc
CreateFileA
GetStdHandle
SetFileAttributesW
DeleteFileA
IsBadReadPtr
HeapSize
SetLastError
GetEnvironmentVariableA
GetCommandLineA
cryptui
CryptUIWizExport
CryptUIStartCertMgr
WizardFree
LocalEnrollNoDS
WizardFree
CryptUIWizBuildCTL
DllRegisterServer
CryptUIWizDigitalSign
LocalEnroll
CryptUIWizImport
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
DllUnregisterServer
winrnr
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lgntnaz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE