Static task
static1
Behavioral task
behavioral1
Sample
ae9f87917262a7d5dbd91c63bc8c05f25d6bf21dd68ee66887bb189ef1c80c75.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ae9f87917262a7d5dbd91c63bc8c05f25d6bf21dd68ee66887bb189ef1c80c75.exe
Resource
win10v2004-20220901-en
General
-
Target
ae9f87917262a7d5dbd91c63bc8c05f25d6bf21dd68ee66887bb189ef1c80c75
-
Size
284KB
-
MD5
0d0631457dff408e4c20033fc9a14a13
-
SHA1
0abab96274935b74ddd7c95165125dae395d31e6
-
SHA256
ae9f87917262a7d5dbd91c63bc8c05f25d6bf21dd68ee66887bb189ef1c80c75
-
SHA512
d14445f1a29661ce54d9b701f283f73c0f906661d1d403596eb421ab4a8f86de635792c7daa041737f31823d057cab4a66c77e23d1d5690bbd89102d327f39a2
-
SSDEEP
6144:K6EBO4rEx6pkrkx7LASoXeYW1Ifq7o3JUO/rSd/8ox5vBSk:K6EoN6ptx7IKIMo3mO/rSd55Z
Malware Config
Signatures
Files
-
ae9f87917262a7d5dbd91c63bc8c05f25d6bf21dd68ee66887bb189ef1c80c75.exe windows x86
4068e2d812eaa9478fad5d4778eb7b30
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
VirtualAlloc
VirtualFree
OpenEventW
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
oleaut32
OleSavePictureFile
OleCreatePropertyFrame
SafeArraySetRecordInfo
SysReAllocStringLen
OleLoadPictureFileEx
CreateTypeLib
OleLoadPictureFile
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 180KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rpgftta Size: - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE