Static task
static1
Behavioral task
behavioral1
Sample
aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8.exe
Resource
win10v2004-20220812-en
General
-
Target
aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8
-
Size
118KB
-
MD5
703c545294c45a99e5da5eaa2cfd7710
-
SHA1
faa66fd28ac8cc9484efdf0fc507dc4f5be13c70
-
SHA256
aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8
-
SHA512
842bf4acca02ac8951ff1f00e9f7b76abff17813aa5efbe6133247eb05e9f438bc0881fa53cf0e87bcdd6f9b8844f844edd03b057d294a7646318e9546eb3c17
-
SSDEEP
3072:hVxWLfRu+Vm+mMJeMcN8zo9s93KK4JppVe42zefflBiApX:XGfRvvm66NHHHXp44j7tpX
Malware Config
Signatures
Files
-
aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8.exe windows x86
1f42710ed7a4abdb7edf9403b5aa2d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
VirtualProtect
VirtualQueryEx
WriteConsoleW
WriteConsoleW
SetEvent
GetPrivateProfileSectionW
GetProcessHeap
GetStartupInfoA
HeapDestroy
GetModuleHandleA
GetStdHandle
GetCommandLineA
lstrcpyA
GetDriveTypeW
CancelIo
CopyFileA
GetFileAttributesW
lstrlenW
DeleteFileA
WriteConsoleW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
DllGetClassObject
cryptui
CryptUIWizExport
CryptUIWizBuildCTL
CryptUIStartCertMgr
DllRegisterServer
WizardFree
CryptUIWizImport
WizardFree
LocalEnroll
LocalEnrollNoDS
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIWizDigitalSign
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ