Static task
static1
Behavioral task
behavioral1
Sample
1aea2c8939ffa5328a178c18690400cd70d80c13135e4d00b5ba2b82f4d108b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1aea2c8939ffa5328a178c18690400cd70d80c13135e4d00b5ba2b82f4d108b8.exe
Resource
win10v2004-20220901-en
General
-
Target
1aea2c8939ffa5328a178c18690400cd70d80c13135e4d00b5ba2b82f4d108b8
-
Size
206KB
-
MD5
6e84f0da43caa20f4bd2771c7f46e118
-
SHA1
dd93ea97a5b0c71ab0a7e00645e191f0b1b44aff
-
SHA256
1aea2c8939ffa5328a178c18690400cd70d80c13135e4d00b5ba2b82f4d108b8
-
SHA512
01cb1a5229cb19b2e740104c99b571d74938f49eb97c7a9208b0d7d2f2f0d99d34d27383838246f1c7127cb25072ba0b53abf5e690960427e2a98dec44041bfa
-
SSDEEP
3072:tsWHgkXfkgHf2JsIWBmgGFHOL2hJl9LMirJ/8+cqgr7jr3+jZ9dJa4RmQtTx2u:DHgG3Hfh0w2/7RJ/8rq4WFnJTRmkH
Malware Config
Signatures
Files
-
1aea2c8939ffa5328a178c18690400cd70d80c13135e4d00b5ba2b82f4d108b8.exe windows x86
2d26cc0d8d9cabd2e0f2c21598ba3618
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
SystemTimeToFileTime
WideCharToMultiByte
LockResource
GetVolumeInformationA
GetCurrentProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
CreateFileA
GetSystemTimeAsFileTime
GetTickCount
GetProcessHeap
MultiByteToWideChar
SetLastError
lstrcpyA
CloseHandle
GetLocalTime
HeapFree
GetOEMCP
GetLocaleInfoA
LoadLibraryW
FindResourceA
lstrlenA
HeapAlloc
IsValidLocale
lstrcmpA
scecli
SceAddToNameStatusList
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
schannel
QueryContextAttributesA
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW
advapi32
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ