Static task
static1
Behavioral task
behavioral1
Sample
6aaba6403ac879fbd6ade48024721df7a048d0b30befb23d9e37da089ba71345.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6aaba6403ac879fbd6ade48024721df7a048d0b30befb23d9e37da089ba71345.exe
Resource
win10v2004-20220901-en
General
-
Target
6aaba6403ac879fbd6ade48024721df7a048d0b30befb23d9e37da089ba71345
-
Size
153KB
-
MD5
674e0a20bfc4232f8e4ab67c4c3a3770
-
SHA1
dcaebb6c05e505b66b2777fce7747bd085fd44fe
-
SHA256
6aaba6403ac879fbd6ade48024721df7a048d0b30befb23d9e37da089ba71345
-
SHA512
0a86ae4c8b74487c789f40ebfe4ca874f4a86c1a0948c9664a3095b24f19126bdc55daaad4286a10466c88f9a3a09da092e301973c3966be940f37ebad1eab88
-
SSDEEP
1536:OX04AJ1eVRz+FyYARGbrBkHvJZpU87dVJYYF12WNrZ0h8BH1LhHMV9YIHzns:54Ai5NYARGbrBkPb7nJhz2q0wdMnYA
Malware Config
Signatures
Files
-
6aaba6403ac879fbd6ade48024721df7a048d0b30befb23d9e37da089ba71345.exe windows x86
6eba2ccb3cce8ba77d8d6542232367d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
GetDC
CharNextA
TranslateMessage
GetParent
ShowWindow
GetDesktopWindow
kernel32
VirtualAlloc
GetThreadLocale
GetWindowsDirectoryA
GetDriveTypeA
IsDebuggerPresent
SetLastError
GetCurrentProcessId
RemoveDirectoryA
lstrcmpiA
GetLastError
lstrlenW
VirtualFree
CopyFileA
GetCommandLineW
gdi32
GetClipBox
GetObjectA
CreatePen
Rectangle
SelectPalette
glu32
gluTessCallback
comctl32
InitCommonControls
Sections
.text Size: 1024B - Virtual size: 1018B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Peiemaqv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ