Static task
static1
Behavioral task
behavioral1
Sample
0aa8531c588e7b08e8cf28ae6e13e59029430fb3799655d31dee45e01dc4d567.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0aa8531c588e7b08e8cf28ae6e13e59029430fb3799655d31dee45e01dc4d567.exe
Resource
win10v2004-20220812-en
General
-
Target
0aa8531c588e7b08e8cf28ae6e13e59029430fb3799655d31dee45e01dc4d567
-
Size
789KB
-
MD5
66d5f4e7d947604a5188cc33139cafb0
-
SHA1
b1af4e12836e7efd15163dffd59a11403379786a
-
SHA256
0aa8531c588e7b08e8cf28ae6e13e59029430fb3799655d31dee45e01dc4d567
-
SHA512
ee12a1e816d0ca3f5439a63d25ae7a39a468a9aa42b4b5f00e3032cb935f8932dd9d9c573671156c0255c596a0c270587fe0bab3cba67b2b7c2c8addcef78cf0
-
SSDEEP
24576:lxM3cRgAAOhUjxAQ7ZpJN6aa9JUmS2p6gU:lmsvyFAo6b9JUYo
Malware Config
Signatures
Files
-
0aa8531c588e7b08e8cf28ae6e13e59029430fb3799655d31dee45e01dc4d567.exe windows x86
03ae7898ed07fd58c618b2e5aa371548
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
GetDriveTypeA
PulseEvent
GetPrivateProfileSectionA
GetLogicalDrives
LoadLibraryW
HeapSize
TlsGetValue
lstrlenA
GetLastError
ReadConsoleA
GetStartupInfoA
DeleteFileW
FindAtomW
CloseHandle
ReleaseMutex
GetStringTypeW
VirtualProtectEx
ReadConsoleA
SearchPathA
Sleep
uxtheme
GetThemeSysSize
GetWindowTheme
CloseThemeData
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
CloseThemeData
SetWindowTheme
GetThemeColor
DrawThemeBackground
DrawThemeEdge
OpenThemeData
GetThemeBool
gpedit
BrowseForGPO
ExportRSoPData
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 781KB - Virtual size: 781KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE