Static task
static1
Behavioral task
behavioral1
Sample
aab7beafcd21225f7a5e374133c245e6ccbef74f08443d08baea5f9d43377182.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aab7beafcd21225f7a5e374133c245e6ccbef74f08443d08baea5f9d43377182.exe
Resource
win10v2004-20220812-en
General
-
Target
aab7beafcd21225f7a5e374133c245e6ccbef74f08443d08baea5f9d43377182
-
Size
54KB
-
MD5
41dbe94cc29c978409d481ecc98233eb
-
SHA1
c7060df18b82d94413368d86178a4b3e050459b9
-
SHA256
aab7beafcd21225f7a5e374133c245e6ccbef74f08443d08baea5f9d43377182
-
SHA512
ad8b3dadbfedad6191c5eda678eb78bf1284be5174767f9c1922030a50ac563e7f5ae167bcc21b961e9c2ad8189cd9fe1cedf1719a6dc0c26b8a407eee3dcce3
-
SSDEEP
1536:spiyIwc7QIXOJQXcN6z8bTtqoT9kRDm28:skylaEIcNH/tqcM
Malware Config
Signatures
Files
-
aab7beafcd21225f7a5e374133c245e6ccbef74f08443d08baea5f9d43377182.exe windows x86
5f85e1933d9b597f4721164949330488
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedState
user32
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
DestroyMenu
PostQuitMessage
SetTimer
CreatePopupMenu
InsertMenuItemA
LoadIconA
DefWindowProcA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
KillTimer
DestroyWindow
CreateWindowExA
ShowWindow
shell32
Shell_NotifyIconA
ShellExecuteA
kernel32
GetModuleFileNameA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE