Static task
static1
Behavioral task
behavioral1
Sample
aaff3c6e215b3bebe0f3d2942d84dbc52314e0edb9b389a13a6499e9191ecc28.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaff3c6e215b3bebe0f3d2942d84dbc52314e0edb9b389a13a6499e9191ecc28.exe
Resource
win10v2004-20220901-en
General
-
Target
aaff3c6e215b3bebe0f3d2942d84dbc52314e0edb9b389a13a6499e9191ecc28
-
Size
49KB
-
MD5
6e9ee0b914fa8407bb9ad4669dfc8ff4
-
SHA1
297da47fca856f1c2084ab957e498cccb731c367
-
SHA256
aaff3c6e215b3bebe0f3d2942d84dbc52314e0edb9b389a13a6499e9191ecc28
-
SHA512
d02183f1b547a007f9587ca9223c662ed8ba4c2eedae0a21c6a49cfe0ef1bc83637744332dee78e813b7d95570ccd5b8731b3a8b12247ed57f3179401fba4a36
-
SSDEEP
768:z22RP3eVVM5D56chf6O+2SKHoRLJ+z4CGwaxchSFNF23ra:a2RPubo5hf42SMsLJk4CGwaxiSHF2G
Malware Config
Signatures
Files
-
aaff3c6e215b3bebe0f3d2942d84dbc52314e0edb9b389a13a6499e9191ecc28.exe windows x86
fbe4ad1b6549676590f10781df16efee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateMutexA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetProcessHeap
GetStdHandle
GetTickCount
GetVersionExA
HeapAlloc
HeapDestroy
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
Sleep
VirtualAlloc
lstrlenA
user32
EnableWindow
EqualRect
FillRect
GetClassNameA
GetSysColorBrush
GetWindowDC
GetWindowPlacement
LoadBitmapA
LoadCursorA
PostMessageA
PostQuitMessage
SetDlgItemTextA
SetTimer
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ