Static task
static1
Behavioral task
behavioral1
Sample
aff1cf4d9f5fa30b76a59161b1f1f74df0e6897326c91df22feaa0e3f7b097a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aff1cf4d9f5fa30b76a59161b1f1f74df0e6897326c91df22feaa0e3f7b097a7.exe
Resource
win10v2004-20220812-en
General
-
Target
aff1cf4d9f5fa30b76a59161b1f1f74df0e6897326c91df22feaa0e3f7b097a7
-
Size
108KB
-
MD5
83acd4e76439c8312bb7f5e752c9aa90
-
SHA1
b48353194355eb6a9f0e0fe859a910eddae8aeae
-
SHA256
aff1cf4d9f5fa30b76a59161b1f1f74df0e6897326c91df22feaa0e3f7b097a7
-
SHA512
3deeed5165978ce21a935bcc895f38fa523112a4b899abe8e18cd8690d3964b02539438235a272562edc56e331fbd61b51d821e69cd1d50a34f56990d9fd7024
-
SSDEEP
1536:gygnfO6hUKFC9kiTSudGD3YOcoiHQqNQ4CzOkuS5tBnHHVFySRKt:gym3iKwAudGD3VSQPhSktPHOSct
Malware Config
Signatures
Files
-
aff1cf4d9f5fa30b76a59161b1f1f74df0e6897326c91df22feaa0e3f7b097a7.exe windows x86
ce775f496195e95e30164ebc3bfcad35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
SHFileOperationA
kernel32
GlobalDeleteAtom
GetCPInfo
GetFileAttributesA
GetModuleHandleA
ExitThread
DeleteCriticalSection
Sleep
GetCommandLineW
SizeofResource
DeleteFileA
GetCurrentThread
LoadLibraryA
VirtualAllocEx
GetProcAddress
CreateFileA
user32
DefMDIChildProcA
WindowFromPoint
IsWindowEnabled
InvalidateRect
CharLowerBuffA
DestroyCursor
GetSystemMetrics
IsRectEmpty
GetTopWindow
DrawFrameControl
IntersectRect
DestroyMenu
DestroyWindow
PostMessageA
PeekMessageW
SetClipboardData
FillRect
DrawIconEx
EnableWindow
GetActiveWindow
GetWindowLongW
GetKeyState
ScreenToClient
IsIconic
GetClassInfoA
SetMenuItemInfoA
SetActiveWindow
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ