Static task
static1
Behavioral task
behavioral1
Sample
ace87a4d71a1d1a690e5c6bb3e675f66f8eff40ce3650674eb6e7d2dd3db2331.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ace87a4d71a1d1a690e5c6bb3e675f66f8eff40ce3650674eb6e7d2dd3db2331.exe
Resource
win10v2004-20220812-en
General
-
Target
ace87a4d71a1d1a690e5c6bb3e675f66f8eff40ce3650674eb6e7d2dd3db2331
-
Size
786KB
-
MD5
813d4af44923bda15e5137bce3fad200
-
SHA1
8fbb403b2c8ef4089bef2933ad7a0c116506cc12
-
SHA256
ace87a4d71a1d1a690e5c6bb3e675f66f8eff40ce3650674eb6e7d2dd3db2331
-
SHA512
5ef43c2f02305bc813e2d6aae90b51ef5c52d871f96c4ebb35a9e5a8f5b19519dd04ee83422cdee880cbfc04dfd9bd0b1c13de9a50370ae68fd207b92c270f53
-
SSDEEP
24576:6qIBYwyblp2kLKzMqWGgYucluRMJR/wjhV:5nVp28qW0VeMJRA
Malware Config
Signatures
Files
-
ace87a4d71a1d1a690e5c6bb3e675f66f8eff40ce3650674eb6e7d2dd3db2331.exe windows x86
f5a7936fd0c9f99c108ac325816389a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
IsValidLocale
ReadConsoleA
GetLastError
CloseHandle
GetModuleHandleA
ReadFile
GetFileSize
GetFileTime
InitializeCriticalSection
CreateMutexA
IsBadStringPtrW
ReadConsoleA
FormatMessageA
HeapCreate
lstrcatA
FindResourceA
SetFileAttributesA
GetStartupInfoW
GetCurrentDirectoryW
ReadConsoleA
msi
MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA
user32
IsWindow
LoadCursorW
GetWindowTextA
PostMessageW
SetFocus
DispatchMessageA
wsprintfW
IsDialogMessageA
SetCursorPos
GetWindowLongW
IsCharLowerA
PeekMessageW
IsZoomed
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 771KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE