Static task
static1
Behavioral task
behavioral1
Sample
ae07e6305060be7e99750eba348e59a9434c879c763028e34884ef9d3176d43c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae07e6305060be7e99750eba348e59a9434c879c763028e34884ef9d3176d43c.exe
Resource
win10v2004-20221111-en
General
-
Target
ae07e6305060be7e99750eba348e59a9434c879c763028e34884ef9d3176d43c
-
Size
88KB
-
MD5
be4208b13dbe500fae2d25c9dd1166d6
-
SHA1
c647ce35d0bc0c1d4f0370ef03454e382b71a9ae
-
SHA256
ae07e6305060be7e99750eba348e59a9434c879c763028e34884ef9d3176d43c
-
SHA512
e84d3c65e31b9d575b27d072b5e4df43a540a8bd4289d53b0b672bd09dfcb81c6ea6c2374f51979795f181b593cb27754e82201f8c341c6adea6c25a0f20898a
-
SSDEEP
768:iEh2pYW4DyDfDozDashbuvfswVfKz3qq77KTTw8doPojQoKF6pTpiB9wBpEpxqSL:vh2mW4eoSz+7mTTwCoPjo3H6VoX8
Malware Config
Signatures
Files
-
ae07e6305060be7e99750eba348e59a9434c879c763028e34884ef9d3176d43c.exe windows x86
96752f87d96645b15006c2ed9024d5f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetFileSize
WriteFile
LockResource
SizeofResource
LoadResource
FindResourceA
CreateFileA
GetModuleFileNameA
GetVersionExA
GetEnvironmentVariableA
lstrcatA
lstrcpyA
ReadFile
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
CreateProcessA
CopyFileA
GetTickCount
GetStringTypeA
LCMapStringW
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
CloseHandle
Process32Next
lstrcmpiA
GetShortPathNameA
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
wsprintfA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteA
shlwapi
PathFileExistsA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ