Static task
static1
Behavioral task
behavioral1
Sample
ae3bb4d1a67520467269660489264d9424e0b24ed334aeacc23d1bd9e53fdc1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae3bb4d1a67520467269660489264d9424e0b24ed334aeacc23d1bd9e53fdc1b.exe
Resource
win10v2004-20220812-en
General
-
Target
ae3bb4d1a67520467269660489264d9424e0b24ed334aeacc23d1bd9e53fdc1b
-
Size
317KB
-
MD5
083b318840c63ee177519f1b7d45f1af
-
SHA1
e512fa09d72a2027e7eb5b29989aba6b0d739378
-
SHA256
ae3bb4d1a67520467269660489264d9424e0b24ed334aeacc23d1bd9e53fdc1b
-
SHA512
83e8d9e34102831a294e9d259faf405aed442c6a6b47ecbdd6f17213b4ac41288300e5ead32400a14af4d19ea9cf37fa3791933c083046b163163e5aba41e34c
-
SSDEEP
6144:/Rg2HxuuQagkTj9hBhf+q/R+eDDyVMKOKhWKO9POgVxiarcEqh9D1m:5BHx19g2jfBNWrVtOIWHPR+Eco
Malware Config
Signatures
Files
-
ae3bb4d1a67520467269660489264d9424e0b24ed334aeacc23d1bd9e53fdc1b.exe windows x86
6078b4995b54e2f135662b3c25922f73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
VirtualProtect
LoadLibraryExA
RaiseException
DeleteAtom
WriteProfileStringA
GlobalFree
EnterCriticalSection
LockResource
FreeConsole
GetTimeFormatA
GlobalAddAtomA
HeapCreate
GlobalUnlock
GlobalAddAtomA
GetACP
SizeofResource
LocalFree
GetStdHandle
lstrcpyA
user32
GetActiveWindow
GetWindowTextLengthA
GetWindow
DrawEdge
GetWindowTextA
ValidateRect
GetFocus
ReleaseDC
EndPaint
BeginPaint
GetDC
GetParent
IsIconic
CloseWindow
ShowWindow
GetClassInfoExA
AlignRects
GetClassNameA
GetForegroundWindow
mprapi
MprAdminUserWrite
MprAdminUserGetInfo
MprAdminUserOpen
MprAdminUserClose
MprAdminUserRead
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ