Static task
static1
Behavioral task
behavioral1
Sample
aefe98d28b0d368c94c1102e615811b1d9825373d86e5a0031d0b41f2452bfb8.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
aefe98d28b0d368c94c1102e615811b1d9825373d86e5a0031d0b41f2452bfb8.exe
Resource
win10v2004-en-20220113
General
-
Target
aefe98d28b0d368c94c1102e615811b1d9825373d86e5a0031d0b41f2452bfb8
-
Size
355KB
-
MD5
e73a78c29a9791b574a3ff41bf290cfb
-
SHA1
a974b4b7d2f0b0d4366123c0a591327b6108e6d8
-
SHA256
aefe98d28b0d368c94c1102e615811b1d9825373d86e5a0031d0b41f2452bfb8
-
SHA512
69ba2a63a6bd0e125ac2e13e8c7571c08f0b6d1a0fe1e5670346c4cf16dd74b179f181aad4064f656ce092f8ca105b221dd3d4c423c32eccc649755e4ed1b0a4
Malware Config
Signatures
Files
-
aefe98d28b0d368c94c1102e615811b1d9825373d86e5a0031d0b41f2452bfb8.exe windows x86
a2d52ad9b93d5d3883003460ff6c902a
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
__WSAFDIsSet
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
GetProcessMemoryInfo
iphlpapi
IcmpSendEcho
userenv
LoadUserProfileW
uxtheme
IsThemeActive
user32
GetDC
gdi32
LineTo
comdlg32
GetSaveFileNameW
advapi32
AddAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
RegisterTypeLi
Sections
.MPRESS1 Size: 302KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE