Static task
static1
Behavioral task
behavioral1
Sample
aec41cf95d3131ecce3d2ed8962459a40ae4bd8d48ceba00cfbcff3a1ab01409.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aec41cf95d3131ecce3d2ed8962459a40ae4bd8d48ceba00cfbcff3a1ab01409.exe
Resource
win10v2004-20220812-en
General
-
Target
aec41cf95d3131ecce3d2ed8962459a40ae4bd8d48ceba00cfbcff3a1ab01409
-
Size
124KB
-
MD5
64a8212320a1efb895480f7939d35670
-
SHA1
102b1e9c189859ea8d632a5b86a788c914024988
-
SHA256
aec41cf95d3131ecce3d2ed8962459a40ae4bd8d48ceba00cfbcff3a1ab01409
-
SHA512
d6c2a5fb2d2dec04f474e8b15a00a9bcff4eeea8179efbbf7e4951aee2b4369263c47d7fb6c7543650d145e9d4f41bed28de423f98ff4839880df18e2c293f6b
-
SSDEEP
3072:3TD/LSDSYbakiB4gctCIfcFV/kwatXqHb:33/ibCBh/kwGXq7
Malware Config
Signatures
Files
-
aec41cf95d3131ecce3d2ed8962459a40ae4bd8d48ceba00cfbcff3a1ab01409.exe windows x86
c31ffc4a3e71b7e8eee3450e9c96aa09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Get_Sibling
CM_Get_Child
CM_Get_Device_IDA
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
CM_Get_Parent
kernel32
WinExec
GetCommandLineA
CloseHandle
CreateFileA
DeviceIoControl
GlobalFree
GlobalAlloc
WideCharToMultiByte
SetFilePointer
FlushFileBuffers
ExitProcess
GetModuleHandleA
GetVersionExA
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapAlloc
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetStdHandle
user32
wsprintfA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE