Static task
static1
Behavioral task
behavioral1
Sample
umciavi32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
umciavi32.exe
Resource
win10v2004-20230220-en
General
-
Target
umciavi32.exe
-
Size
5.7MB
-
MD5
2a7d80cbb33aebf91f7abe0d60c71762
-
SHA1
c624f209745aab06447084d523a057c9385fd493
-
SHA256
ddebf16445bb19ff4ac7cc4e9212341e57793570768e355eecfa44610d942b4c
-
SHA512
f52cc4c73af987752ead44b81eabd9809acc5ff338f9a378547a7ab743006beb2ab21ad770a70972eb2d78a711015943bb671c894cb011f6bae2bd266b71ee9e
-
SSDEEP
98304:LbAY2dFeCacPI6dpZ4/4R4ZN3KaBm+jlMaivOPT/W2L00ZlyWsdYX5:fAL+cPhjZ4/4RqgaBsaRPFnZlyR6
Malware Config
Signatures
Files
-
umciavi32.exe.exe windows x86
3133a724d4416e1208dbb7e6085fe21e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDC
CharUpperBuffW
Sections
.text Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: - Virtual size: 128B
.rdata0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata2 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ