Static task
static1
Behavioral task
behavioral1
Sample
aa8b46427e37969fcca8db8667c0c7f63276467a70dc739d1c5391fd2c3bc3a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa8b46427e37969fcca8db8667c0c7f63276467a70dc739d1c5391fd2c3bc3a4.exe
Resource
win10v2004-20220901-en
General
-
Target
aa8b46427e37969fcca8db8667c0c7f63276467a70dc739d1c5391fd2c3bc3a4
-
Size
471KB
-
MD5
86d1807600b289f064bae30005145b5d
-
SHA1
265e5ac12e7348a804f72857393a5b13e5843173
-
SHA256
aa8b46427e37969fcca8db8667c0c7f63276467a70dc739d1c5391fd2c3bc3a4
-
SHA512
c740c534a84c90489b6de2178ccdbe06adc957c2d6759e20de10ad7b00b795aefdbd3321e162c6b6cbff8064911101f3b9fe65665256290a1360660b27f65fe2
-
SSDEEP
12288:zTloC1bARFKPLDt0/Fon3Tst8B6rOSKED:zTJAnWXt0/G3TstG6r9V
Malware Config
Signatures
Files
-
aa8b46427e37969fcca8db8667c0c7f63276467a70dc739d1c5391fd2c3bc3a4.exe windows x86
427a4e714148c7a5409ee14d6b2de448
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
msvcrt
memcpy
exit
_strdup
__p___argv
??_7bad_typeid@@6B@
_exit
__set_app_type
_acmdln
_mbsnextc
__setusermatherr
_ismbstrail
__getmainargs
?name@type_info@@QBEPBDXZ
__p__fmode
__p__commode
_except_handler3
_ismbbgraph
_controlfp
sinh
__unDName
fwrite
?set_new_handler@@YAP6AXXZP6AXXZ@Z
sscanf
fread
?set_terminate@@YAP6AXXZP6AXXZ@Z
_initterm
__p__daylight
_XcptFilter
_chkesp
iswctype
_mkdir
_adjust_fdiv
_ctime64
user32
SendNotifyMessageA
WaitMessage
EndPaint
GetMenu
DdeEnableCallback
GetSystemMenu
DlgDirListA
RegisterDeviceNotificationW
MessageBoxIndirectA
SetForegroundWindow
TabbedTextOutA
DestroyAcceleratorTable
GetProcessDefaultLayout
CharLowerA
DispatchMessageW
VkKeyScanExW
BringWindowToTop
GetSysColorBrush
IsWindow
IsCharAlphaA
IsChild
IMPQueryIMEA
SendMessageCallbackW
GetDC
SetWindowsHookA
EnumDisplaySettingsW
CheckMenuRadioItem
GetDlgCtrlID
olepro32
OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
DllGetClassObject
OleIconToCursor
DllRegisterServer
OleCreateFontIndirect
OleLoadPicture
OleTranslateColor
DllCanUnloadNow
shlwapi
StrCSpnW
PathFindFileNameW
StrStrA
StrStrIA
PathRemoveExtensionA
PathStripToRootW
StrRStrIW
PathRemoveBlanksA
UrlApplySchemeW
PathFindExtensionW
PathRemoveBlanksW
PathSkipRootW
PathGetDriveNumberW
SHRegGetBoolUSValueW
StrTrimW
PathFindExtensionA
StrTrimA
PathStripPathW
PathIsLFNFileSpecW
PathIsRootW
StrCmpW
PathFindFileNameA
StrStrW
PathCreateFromUrlW
StrStrIW
SHDeleteKeyW
StrCSpnA
StrNCatW
PathStripToRootA
PathSkipRootA
UrlHashA
StrCmpIW
PathRemoveExtensionW
PathRemoveBackslashW
PathGetDriveNumberA
PathStripPathA
SHSetValueW
gdi32
CreateBrushIndirect
SelectObject
CreateSolidBrush
CreatePen
CreateFontIndirectA
EqualRgn
CreatePalette
GetStockObject
DeleteObject
kernel32
QueryPerformanceCounter
GetModuleHandleA
GetVersionExA
GetCurrentProcessId
HeapAlloc
VirtualAlloc
HeapFree
GetTickCount
GetVersionExW
lstrlenA
GetSystemTime
GetStartupInfoA
GetSystemTimeAsFileTime
lstrcmpA
ResetEvent
SetEvent
CloseHandle
GetCurrentThreadId
GetStartupInfoW
GetCurrentProcess
GetProcessHeap
CreateEventA
comctl32
ImageList_SetIconSize
FlatSB_SetScrollProp
FlatSB_EnableScrollBar
CreateUpDownControl
DrawStatusTextW
InitCommonControlsEx
InitCommonControls
ole32
CoRegisterPSClsid
CoUninitialize
CoRegisterSurrogate
CreateDataCache
CreateStreamOnHGlobal
WdtpInterfacePointer_UserSize
CoFreeLibrary
CoGetCurrentProcess
CreateClassMoniker
OleCreateEmbeddingHelper
OleLoadFromStream
HBITMAP_UserSize
HENHMETAFILE_UserSize
CoReleaseMarshalData
CoInitialize
CLSIDFromString
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ