Static task
static1
Behavioral task
behavioral1
Sample
12aa951580fef59eb410b34683b0138366b14f1fa339939691821ae4e40005dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12aa951580fef59eb410b34683b0138366b14f1fa339939691821ae4e40005dd.exe
Resource
win10v2004-20220812-en
General
-
Target
12aa951580fef59eb410b34683b0138366b14f1fa339939691821ae4e40005dd
-
Size
87KB
-
MD5
aefc8cc6d52737007d8895a7b25b9ed2
-
SHA1
419755608bedcfceae90923313ee7681901c4283
-
SHA256
12aa951580fef59eb410b34683b0138366b14f1fa339939691821ae4e40005dd
-
SHA512
2326a063909d144a246230a588e063579d378990cade6e5e9066640cdfd547d8b2533b91a8076fef3a6093672d4a214c7056157c7deae4fc186a88b311ec055b
-
SSDEEP
1536:72udwKmnJw5sjGzMW7jZWV9OZTQ6HeckO2tQpnD4lfnZ83YacIyP/69QAq0Gb8/i:iGwKmJwSoMYoV9OLKDtYnslxKYBbWq0+
Malware Config
Signatures
Files
-
12aa951580fef59eb410b34683b0138366b14f1fa339939691821ae4e40005dd.exe windows x86
77f89e585dd2013e8f738f634c15bfea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
LZSeek
FoldStringA
FindFirstVolumeMountPointA
GetProcessWorkingSetSize
GetMailslotInfo
EnumLanguageGroupLocalesA
IsBadStringPtrA
EndUpdateResourceW
CreateFiber
EnumCalendarInfoExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE