Static task
static1
Behavioral task
behavioral1
Sample
aa1a1d2daaeab60c594f4b096ede6dd459d274e7fee25be573f300e37212e2f3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa1a1d2daaeab60c594f4b096ede6dd459d274e7fee25be573f300e37212e2f3.exe
Resource
win10v2004-20220812-en
General
-
Target
aa1a1d2daaeab60c594f4b096ede6dd459d274e7fee25be573f300e37212e2f3
-
Size
330KB
-
MD5
1791b140714217b2eee8ebe9f541de81
-
SHA1
2ccbbf3e121a76a61a9e8044482262a621e46edf
-
SHA256
aa1a1d2daaeab60c594f4b096ede6dd459d274e7fee25be573f300e37212e2f3
-
SHA512
857b28c73126855185dad19aa8263c2296b2ddc066deae5bc400b4e8e7a1426b5d03394ef8d0202da6d36c8648bd74dcb711a87c04f4a76b321bcf02240d1836
-
SSDEEP
6144:clAUemJKXzL5vOTiIIWPkHHScTXuXY6ZzIqQFM1TAP4ClREfJo4SKb3gxqF7Vw:clAUbKNOT5PmDIpZsqNNAP4ClREZNb3U
Malware Config
Signatures
Files
-
aa1a1d2daaeab60c594f4b096ede6dd459d274e7fee25be573f300e37212e2f3.exe windows x86
70756875ad4fd2afdd5d10de81d2c367
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetAtomNameA
HeapReAlloc
GetConsoleCP
GetSystemDefaultLangID
HeapCreate
CloseHandle
SuspendThread
WaitForMultipleObjects
GetModuleHandleA
InterlockedExchange
CompareFileTime
GetCommandLineA
LoadLibraryExA
GetStdHandle
WaitForSingleObject
GetTickCount
GlobalUnlock
lstrlenA
VirtualProtect
SetConsoleCP
user32
GetCursorInfo
DragObject
InsertMenuA
DestroyMenu
GetKeyboardLayout
GetDlgItem
EnableScrollBar
InvertRect
SetPropA
DrawCaption
GetKeyState
CopyImage
FillRect
FindWindowA
SetWindowPos
SetScrollInfo
DispatchMessageA
IsDialogMessage
CreateMenu
CreateIcon
DialogBoxParamA
advapi32
RegEnumKeyA
RegCreateKeyExA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ