Static task
static1
Behavioral task
behavioral1
Sample
ae5cb144ae127f96788ecdc8abb3008648c611e5f2331c9dad9ab4deab186dec.exe
Resource
win7-20220812-en
General
-
Target
ae5cb144ae127f96788ecdc8abb3008648c611e5f2331c9dad9ab4deab186dec
-
Size
793KB
-
MD5
305acfb0c6719afb5bd4132cb4c67ea0
-
SHA1
a94c77755b5a03f851a1dc22446b5731ee48b7f3
-
SHA256
ae5cb144ae127f96788ecdc8abb3008648c611e5f2331c9dad9ab4deab186dec
-
SHA512
7cc33f7bc7d35cfdbc958ac14c28637e2b6e8e090eb4fdd171cadc3f4c49009e2ca65c2d687abd9b746004a083f9ead760b6ff4abba3a1b02bc114c12893aad7
-
SSDEEP
12288:+6ycxwqgL4kW9HoWfx9E20ucH+fOkEXRTrC6/mdD0orTdbY5E:DyOq4XHoex9E205/mdD00dbh
Malware Config
Signatures
Files
-
ae5cb144ae127f96788ecdc8abb3008648c611e5f2331c9dad9ab4deab186dec.exe windows x86
2628ffe92fb3f00a1de285c47335f612
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
lstrlenW
GetLastError
InitializeCriticalSection
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
LoadLibraryW
Sleep
GetCommandLineW
CloseHandle
DeviceIoControl
CreateFileW
GetCurrentProcessId
CreateProcessW
GetTickCount
DeleteFileW
WaitForSingleObject
CreateEventW
GetLocalTime
LocalFree
CreateMutexW
OpenMutexW
GetModuleHandleW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetProcAddress
GetStringTypeA
LCMapStringA
GetLocaleInfoA
GetLocaleInfoW
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetCurrentProcess
FlushInstructionCache
SetConsoleCtrlHandler
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
GetCurrentThread
FatalAppExitA
HeapCreate
GetStartupInfoW
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
RtlUnwind
CreateThread
ExitThread
TlsFree
DeleteAtom
FindAtomW
DeleteCriticalSection
RaiseException
TlsAlloc
ReleaseMutex
AddAtomW
GetCurrentThreadId
GetStringTypeW
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
OutputDebugStringW
FormatMessageW
GetSystemTime
TlsGetValue
TlsSetValue
GetAtomNameW
OpenThread
user32
PeekMessageW
DestroyWindow
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassA
DefWindowProcW
CreateDialogParamW
FindWindowW
GetActiveWindow
MessageBoxW
SendMessageTimeoutW
GetWindowThreadProcessId
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
IsDialogMessageW
SendMessageW
PostQuitMessage
GetSystemMetrics
LoadImageW
IsWindow
PostMessageW
CharNextW
GetClassInfoW
RegisterClassW
advapi32
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExA
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteExW
ShellExecuteW
SHCreateDirectoryExW
ole32
CoCreateInstance
CoTaskMemRealloc
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
oleaut32
SysFreeString
VarUI4FromStr
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathCombineW
PathRemoveFileSpecW
SHGetValueW
PathFileExistsW
PathAppendW
comctl32
InitCommonControlsEx
wintrust
WTHelperProvDataFromStateData
WinVerifyTrust
crypt32
CertGetNameStringW
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE