Static task
static1
Behavioral task
behavioral1
Sample
ace19105e8ffeff70c6276fb2d126a6613c766a831e12efb495d52e8db4fae81.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ace19105e8ffeff70c6276fb2d126a6613c766a831e12efb495d52e8db4fae81.exe
Resource
win10v2004-20220812-en
General
-
Target
ace19105e8ffeff70c6276fb2d126a6613c766a831e12efb495d52e8db4fae81
-
Size
349KB
-
MD5
831b8212f6e63b956d3c22fc44860aac
-
SHA1
4add1abf5ddcd02ec52ef4da40ee52a1224c9d92
-
SHA256
ace19105e8ffeff70c6276fb2d126a6613c766a831e12efb495d52e8db4fae81
-
SHA512
4d3f47f38063029868807118ca96aa044c58256bc38b490d8d79c4b67e73be3ab3b56b67b0a0f64cd963fbd8feeba8959d3bc006c6d7b62feacfb026041797b5
-
SSDEEP
6144:qxW9PO7fCkea7jxWzRkHY3ZlTVCO/VvM4qPrCkZ:9GK7deY3/o4vUhZ
Malware Config
Signatures
Files
-
ace19105e8ffeff70c6276fb2d126a6613c766a831e12efb495d52e8db4fae81.exe windows x86
f9d417e3a6e53db8294e7e649e59078f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CloseHandle
CreateEventA
CreateFileMappingA
CreateMutexA
CreateProcessA
DeviceIoControl
DuplicateHandle
ExitProcess
ExitThread
FormatMessageA
FreeLibrary
GetCommConfig
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOverlappedResult
GetProcAddress
VirtualAllocEx
GetTickCount
GetVersionExA
LoadLibraryA
LocalFree
MapViewOfFile
OpenProcess
ReleaseMutex
SetErrorMode
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
GetCurrentThread
GetOEMCP
GetSystemInfo
GetProcessHeap
LocalAlloc
GetStartupInfoA
ReadFile
user32
DispatchMessageA
GetClassNameA
GetDC
GetDlgItem
GetForegroundWindow
GetMessageA
GetShellWindow
GetWindowRect
GetWindowTextA
IsDialogMessageA
KillTimer
MsgWaitForMultipleObjects
PeekMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetForegroundWindow
SetTimer
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
wsprintfA
DestroyWindow
DestroyIcon
DefWindowProcA
CreateWindowExA
CreateMenu
CreateDialogParamA
GetSysColor
gdi32
GetStockObject
advapi32
RegOpenKeyA
RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
msvcrt
memmove
_vsnwprintf
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text5 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text4 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text3 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text2 Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text44 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ