Static task
static1
Behavioral task
behavioral1
Sample
aa5f9f48faa17a3ebb0c763e018822e3df04f08f97b1a42410ca4165528bf64b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa5f9f48faa17a3ebb0c763e018822e3df04f08f97b1a42410ca4165528bf64b.exe
Resource
win10v2004-20220812-en
General
-
Target
aa5f9f48faa17a3ebb0c763e018822e3df04f08f97b1a42410ca4165528bf64b
-
Size
140KB
-
MD5
6a22096b12a783e82080a31ab161ca66
-
SHA1
06162d7f8b38c68a7112d2a5ee689949949d28d6
-
SHA256
aa5f9f48faa17a3ebb0c763e018822e3df04f08f97b1a42410ca4165528bf64b
-
SHA512
ae42509d28be428ccfd0f723ced42affff35fef5f7a27a086dc6af9d1e147fd40980b4a615b738cefc5649d81e17961f256c62a29b855cf175ac5617f99261f0
-
SSDEEP
3072:0LZAwutLwz6V6p2jHBiW11kKITERpqFScfZ8y9jZn01x0:Ncz6Up2jHU9TERwN9G1a
Malware Config
Signatures
Files
-
aa5f9f48faa17a3ebb0c763e018822e3df04f08f97b1a42410ca4165528bf64b.exe windows x86
bab65bc390d891063d1ed875d5c48a69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
CloseHandle
user32
CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA
advapi32
RegQueryValueA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ