Static task
static1
Behavioral task
behavioral1
Sample
0ae15c0aef0e50a4a5247076a46200d8351410ec2bcac2cd9a83682950ed4a4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0ae15c0aef0e50a4a5247076a46200d8351410ec2bcac2cd9a83682950ed4a4b.exe
Resource
win10v2004-20220901-en
General
-
Target
0ae15c0aef0e50a4a5247076a46200d8351410ec2bcac2cd9a83682950ed4a4b
-
Size
14KB
-
MD5
90556425de1e8572491f392e12af3082
-
SHA1
a74ae97d97ba4f72978720c83b2613db56d3df0a
-
SHA256
0ae15c0aef0e50a4a5247076a46200d8351410ec2bcac2cd9a83682950ed4a4b
-
SHA512
3c34bd7385a1f8b660942cb2bb2264834862eee4affcd14c7552366dfb9e825cc6f1c405b7957acec55574620a97ca5eeb6961eeacc518da0f19aca69c157139
-
SSDEEP
384:fltXpB5gJQW74o4ZW4PzG5oBF8FZ43lfd9/9X:dtX7mJ17d1tS3lfH/R
Malware Config
Signatures
Files
-
0ae15c0aef0e50a4a5247076a46200d8351410ec2bcac2cd9a83682950ed4a4b.exe windows x86
a0a1f8b98f7f426c14bd1dbd82efecef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCancelTimer
NtClose
NtAccessCheckByType
NtClearEvent
NlsAnsiCodePage
shell32
Shell_NotifyIconW
StrNCmpW
SheFullPathW
SheRemoveQuotesW
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
kernel32
FindNextFileW
GetCommProperties
WriteTapemark
GetComputerNameW
Sections
.text Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 4B - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE