Static task
static1
Behavioral task
behavioral1
Sample
aa0ef2b88e4eef92ee3d94eb63b63b23db9511c13dfbf54f1ea86c0e175048cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa0ef2b88e4eef92ee3d94eb63b63b23db9511c13dfbf54f1ea86c0e175048cd.exe
Resource
win10v2004-20220901-en
General
-
Target
aa0ef2b88e4eef92ee3d94eb63b63b23db9511c13dfbf54f1ea86c0e175048cd
-
Size
736KB
-
MD5
5ae4a400be5c0ae1b10513fa48e144c2
-
SHA1
9f3d300aa4a464e89ac468ca417084339aee4fc3
-
SHA256
aa0ef2b88e4eef92ee3d94eb63b63b23db9511c13dfbf54f1ea86c0e175048cd
-
SHA512
2befb8a93528ce19161ffaffb9c7ea07a2854efb5627fe369ded2afd8513f1680c775806d4a12e7bc8a895e526e4d78dcd963def5a98b080866ee7f9c684fafd
-
SSDEEP
12288:WSQHgC56HLKkC1IaImgY71EN4BKAPeP72eomRFusCXhOjaDY6wAFeKvbRIFcpOfg:CHgBrKkeIE711groInjviNIFccfP2n
Malware Config
Signatures
Files
-
aa0ef2b88e4eef92ee3d94eb63b63b23db9511c13dfbf54f1ea86c0e175048cd.exe windows x86
9bfd994b04157321cde89f1a6c28a208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
CreateProcessA
SizeofResource
SetStdHandle
InterlockedExchange
GetModuleHandleW
GetACP
FindNextFileW
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
TlsSetValue
CreateFileW
GlobalLock
WaitForMultipleObjects
FindNextFileA
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
lstrcmpiW
GetVersionExA
TlsAlloc
ExitProcess
GetOEMCP
GetVersionExW
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
GetFileType
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCommandLineA
GetTickCount
GetModuleHandleA
GetCurrentThread
GetVersion
GetCurrentThreadId
QueryPerformanceCounter
GetLastError
user32
EndDialog
GetDC
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
GetSubMenu
SetWindowTextA
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
CreateWindowExA
GetWindowLongA
RegisterClassA
IsIconic
TranslateMessage
PeekMessageA
FillRect
UpdateWindow
GetMessageA
DestroyWindow
SendMessageA
ReleaseDC
GetCursorPos
DispatchMessageW
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
GetSysColor
PostMessageA
SystemParametersInfoA
IsWindowVisible
InvalidateRect
CallWindowProcA
EnableWindow
SetCursor
SetDlgItemTextA
ShowWindow
MessageBoxA
gdi32
CreateSolidBrush
SetTextColor
DeleteDC
GetDeviceCaps
DeleteObject
SetBkMode
SelectObject
ole32
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysAllocString
VariantClear
Sections
.text Size: 697KB - Virtual size: 1023KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ