Static task
static1
Behavioral task
behavioral1
Sample
aa6d1e27272389d7b6bedfb302b6bd318c500e89079893c663dd5d56132cf791.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa6d1e27272389d7b6bedfb302b6bd318c500e89079893c663dd5d56132cf791.exe
Resource
win10v2004-20220812-en
General
-
Target
aa6d1e27272389d7b6bedfb302b6bd318c500e89079893c663dd5d56132cf791
-
Size
282KB
-
MD5
4452fc4753881bcba13a3de59e1df960
-
SHA1
37980e9eb89c2de4a6c165b2181d65be23c8a828
-
SHA256
aa6d1e27272389d7b6bedfb302b6bd318c500e89079893c663dd5d56132cf791
-
SHA512
369c95b55f540e41c882053fa180439b3919aab296d93f6594de1cbe46c99ea6d318816af39521287bd86d8aa30d726abade30497f2c58ce46779c753298aa13
-
SSDEEP
6144:/T4VmkcwAflADbREHJFcJ4hg4DSlXP/FCeuc5psN:/TaGwAflMEHJF1BDof/FCPc5psN
Malware Config
Signatures
Files
-
aa6d1e27272389d7b6bedfb302b6bd318c500e89079893c663dd5d56132cf791.exe windows x86
2e2e9d71924750574bc307057ab61398
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CloseHandle
GetLocaleInfoW
lstrlenW
SystemTimeToFileTime
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcessId
SetLastError
HeapFree
GetLocalTime
QueryPerformanceCounter
GetSystemTimeAsFileTime
FindResourceW
GetOEMCP
lstrcpyW
LoadLibraryA
WideCharToMultiByte
HeapAlloc
GlobalFindAtomA
CreateFileA
lstrcmpA
GetCurrentProcess
MultiByteToWideChar
w32topl
ToplSTHeapDestroy
ToplScheduleCacheDestroy
ToplSTHeapExtractMin
ToplScheduleExportReadonly
ToplScheduleDuration
ToplScheduleCreate
ToplSTHeapInit
ToplScheduleCacheCreate
fmifs
EnableVolumeCompression
FormatEx
DiskCopy
Chkdsk
Extend
ComputeFmMediaType
Format
Sections
.text Size: 275KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ