Static task
static1
Behavioral task
behavioral1
Sample
aa0790aa3823f6340b12a0b7366a2fcbe2514197ad5627b2356c1defbdc49265.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa0790aa3823f6340b12a0b7366a2fcbe2514197ad5627b2356c1defbdc49265.exe
Resource
win10v2004-20220812-en
General
-
Target
aa0790aa3823f6340b12a0b7366a2fcbe2514197ad5627b2356c1defbdc49265
-
Size
119KB
-
MD5
64530b4bc1ea9ab03c70fa3037582147
-
SHA1
0cb090a4dd2ea6de1eec9570c508284b3363f614
-
SHA256
aa0790aa3823f6340b12a0b7366a2fcbe2514197ad5627b2356c1defbdc49265
-
SHA512
4770c17067b8d615ededcbcdd28d74551d69184fd768e0f65ab95709ba41b8b5ef0dc08a595a47cb0a6c2e43be3fd361d5d60cf4ce29542ab97a62ff8f633ab2
-
SSDEEP
3072:tTTTTxOK6GbBf3EZ1JOrCFjtIgKXHIHs2qxnC:yiEZ18OF5IgYo
Malware Config
Signatures
Files
-
aa0790aa3823f6340b12a0b7366a2fcbe2514197ad5627b2356c1defbdc49265.exe windows x86
777b2fabd7864e0fcdf1b3ec11579fe8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
QueryWin31IniFilesMappedToRegistry
FreeUserPhysicalPages
SetFilePointerEx
GetUserDefaultLangID
GlobalUnlock
IsSystemResumeAutomatic
VirtualQueryEx
RtlCaptureStackBackTrace
WaitForSingleObjectEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE