Static task
static1
Behavioral task
behavioral1
Sample
ae6eb081b6f895e567f627a19062c2a6cb54b44af4e5a4e67095e47055837e33.exe
Resource
win7-20220812-en
General
-
Target
ae6eb081b6f895e567f627a19062c2a6cb54b44af4e5a4e67095e47055837e33
-
Size
1.3MB
-
MD5
6d53264f88e935af7ff4ca21cc528ee7
-
SHA1
bc122e6ea2e35ca7c3e51a5b7d5224a57772657e
-
SHA256
ae6eb081b6f895e567f627a19062c2a6cb54b44af4e5a4e67095e47055837e33
-
SHA512
ce312c3aaaafa47eff0a872e0397df62189473379e57230fa6b3f2019d187542eaa900fe20341ff6f7511c370c5cb1508c22ae7b9fd7e75e99aa4865f4b01501
-
SSDEEP
6144:f8XaDFek7zTTwaIk468UxA3956TsFQxWcsqfFnRvexhWCQe6BJ8KSU2BZ:UXaDFzHTT0LCWXQ06ftRGx6e6BsUM
Malware Config
Signatures
Files
-
ae6eb081b6f895e567f627a19062c2a6cb54b44af4e5a4e67095e47055837e33.exe windows x86
7657e6449e7299ed913651869914d54a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
RaiseException
GetVersionExA
GetCommandLineA
GetModuleHandleA
HeapAlloc
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
VirtualAlloc
GetProcessHeap
CloseHandle
FreeLibrary
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
VirtualQuery
InterlockedExchange
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE