Static task
static1
Behavioral task
behavioral1
Sample
ae0644fa5d742f36aad1dca67f757e50e32c21a6136a205fd8c7cddac9949e07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae0644fa5d742f36aad1dca67f757e50e32c21a6136a205fd8c7cddac9949e07.exe
Resource
win10v2004-20220812-en
General
-
Target
ae0644fa5d742f36aad1dca67f757e50e32c21a6136a205fd8c7cddac9949e07
-
Size
19KB
-
MD5
9037c6f58691a011316f7247170ab690
-
SHA1
c9f8e89f1baa6f36d9999e1d89304e5fb6419597
-
SHA256
ae0644fa5d742f36aad1dca67f757e50e32c21a6136a205fd8c7cddac9949e07
-
SHA512
4d0d262b12fc2e84997a62a928c87925d6d3712f8848d0a0040941ee895d66ae11741b4696c01c652546cc710ee98cdea927b68e1054d2e218f78bf9d8deb1bd
-
SSDEEP
384:iV5oYI3DL2owySV01fPYRbyR0O+8pL9Mpz:s5oVDL2P0KbyR05aL9S
Malware Config
Signatures
Files
-
ae0644fa5d742f36aad1dca67f757e50e32c21a6136a205fd8c7cddac9949e07.exe windows x86
65458c0529a9d9e5316f299b60532f68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlUnwind
NtQueryInformationProcess
ole32
StgOpenStorage
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
advapi32
RegOpenKeyExW
GetLengthSid
rpcrt4
RpcRaiseException
RpcEpUnregister
RpcBindingVectorFree
RpcServerUnregisterIf
RpcServerUseProtseqW
RpcServerInqBindings
RpcServerRegisterIfEx
RpcEpRegisterW
NdrServerCall2
Sections
.text Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ