Static task
static1
Behavioral task
behavioral1
Sample
2aef854ab33dfe4bed88d722c2828ad1c35f1119ea85403a75ee0295b0688bd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2aef854ab33dfe4bed88d722c2828ad1c35f1119ea85403a75ee0295b0688bd8.exe
Resource
win10v2004-20220901-en
General
-
Target
2aef854ab33dfe4bed88d722c2828ad1c35f1119ea85403a75ee0295b0688bd8
-
Size
106KB
-
MD5
151750273a1f02b699e29f38f20ae564
-
SHA1
8b529c3b4afa119b74df3509f9c81dc775da825e
-
SHA256
2aef854ab33dfe4bed88d722c2828ad1c35f1119ea85403a75ee0295b0688bd8
-
SHA512
3c57e965521840f90db574b3508e95f74c4bd23655c15720311aa43b19814de1a6b753cf5cc3bc5a774892b23c9deaf66c80c00a0d79083a28ad8247aedf9b04
-
SSDEEP
1536:8DrQWEhTBXdylWv7eUU7nuMJ9+qmNcElTVA/wd+YUZ9+zzO0CrUD5B:8DrjEVJdxTeUU7vNmNccS/wdD6+vlCQD
Malware Config
Signatures
Files
-
2aef854ab33dfe4bed88d722c2828ad1c35f1119ea85403a75ee0295b0688bd8.exe windows x86
f2470bb68c9b92909fdcb45908c83738
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetEnvironmentVariableA
GetModuleHandleA
GetSystemDirectoryW
RtlMoveMemory
InterlockedIncrement
SetHandleCount
SetFilePointer
GetCurrentProcessId
GetStringTypeExA
GetStringTypeA
GetThreadLocale
GetCurrentThread
WriteConsoleA
LocalAlloc
VirtualProtect
MulDiv
GetTempPathA
GlobalUnlock
GetStringTypeW
QueryPerformanceCounter
LoadResource
GetProcAddress
DeleteFileA
lstrlenW
SizeofResource
lstrcatA
lstrcpynA
msvcrt
__p__commode
_XcptFilter
_adjust_fdiv
_except_handler3
__set_app_type
__p___initenv
__p__fmode
_controlfp
_initterm
__getmainargs
_exit
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Edy Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ