Static task
static1
Behavioral task
behavioral1
Sample
ae1ab0e63697f9c1b48d6e33e51f39ea63b7ad40a9ae35bb9adcf98678f82982.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ae1ab0e63697f9c1b48d6e33e51f39ea63b7ad40a9ae35bb9adcf98678f82982.exe
Resource
win10v2004-20220414-en
General
-
Target
ae1ab0e63697f9c1b48d6e33e51f39ea63b7ad40a9ae35bb9adcf98678f82982
-
Size
3.8MB
-
MD5
faded794f263120377f79cc3cf35e11d
-
SHA1
4add6c66e14478dbd953e05e0bce6844a702618f
-
SHA256
ae1ab0e63697f9c1b48d6e33e51f39ea63b7ad40a9ae35bb9adcf98678f82982
-
SHA512
b41885525518325a0f82753ea340cc7118ae32c8aba57ecce9136571e4fed7f2c4bca09ef990685413c03d9d920635194b2e0145e07d181541a3bc0bdb76c7b4
-
SSDEEP
98304:9qfXJo3XcUpZMJ0HzVq3bNMfgtAvm3u5wLrjFtCPye9rQ:9qfZoncUI0HpqWotAGUw3jk/9r
Malware Config
Signatures
Files
-
ae1ab0e63697f9c1b48d6e33e51f39ea63b7ad40a9ae35bb9adcf98678f82982.exe windows x86
b37e2fe0d9b6ffb4e98e7e3b1a9e25d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetSystemTimes
GetLocaleInfoW
SizeofResource
GetFileAttributesW
lstrlenW
GlobalUnfix
GetLastError
GetProcAddress
RegisterWaitForSingleObject
GetConsoleScreenBufferInfo
GetPrivateProfileSectionW
GetTickCount
GetModuleHandleW
SleepEx
GetCurrentProcess
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
Sleep
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pexux Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ