Static task
static1
Behavioral task
behavioral1
Sample
UI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
UI.exe
Resource
win10v2004-20240508-en
General
-
Target
UI.dll
-
Size
2.5MB
-
MD5
e55e85cc98b0f9c186ee9a61444c0ece
-
SHA1
7f77dafa63d1f0d94f0044cdd2dbe570a4851f9b
-
SHA256
5d97974873d81778ee12183c081433e150d5f52caf49722389e331f567ea4f51
-
SHA512
fc82147470c669d208136a589ab3169f9c72112ad97e3106395f6bf8ebe04f70464fdcba48f6f898ee90407c2cd130a559feb1c9aeffeccf7dae9c7939b4e56e
-
SSDEEP
24576:c57jfUokQ5g8HPelCKmjK83wCMW8rC8//QSi:c57jfNkQ5gL63+rC8//Q
Malware Config
Signatures
Files
-
UI.dll.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
2b:8d:38:a3:19:37:f4:98:41:ac:60:a1:17:49:1b:fbCertificate
IssuerCN=UNITEC\\andoNot Before04/04/2023, 05:29Not After03/04/2024, 11:29SubjectCN=UNITEC\\andodc:d6:fd:ec:15:b1:74:07:47:7d:11:ea:0b:7e:d9:95:2c:26:7d:86:66:86:b0:73:a2:81:2e:2d:48:31:66:7bSigner
Actual PE Digestdc:d6:fd:ec:15:b1:74:07:47:7d:11:ea:0b:7e:d9:95:2c:26:7d:86:66:86:b0:73:a2:81:2e:2d:48:31:66:7bDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\Users\ando\Desktop\UserProject\大井川茶園\MIRAI\UI\obj\Release\net6.0-windows\UI.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ