Static task
static1
Behavioral task
behavioral1
Sample
ae92ebb8f45b86cc9659f6f512f05e1d8ade498a2d0839f0fb03d05ffc8b9bd3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae92ebb8f45b86cc9659f6f512f05e1d8ade498a2d0839f0fb03d05ffc8b9bd3.exe
Resource
win10v2004-20220812-en
General
-
Target
ae92ebb8f45b86cc9659f6f512f05e1d8ade498a2d0839f0fb03d05ffc8b9bd3
-
Size
484KB
-
MD5
a99ea6a593b20e59b8281c3e037de53e
-
SHA1
81fbaf4bb45ffc7888c299de512b9f3ef218f210
-
SHA256
ae92ebb8f45b86cc9659f6f512f05e1d8ade498a2d0839f0fb03d05ffc8b9bd3
-
SHA512
e898fdc11dc8af09f1036c319b7f9ac7ab4656761a4a1fa2025f5ac6c7a07958c85996fcbb05ccf3fd939694a4942ee72e3159ee9ade20131bef3defa690c9ee
-
SSDEEP
12288:esR3jxu5w1MuMlfP3k15WPDyNTdjMCnBma:esRNukMuMlU6L6TNM
Malware Config
Signatures
Files
-
ae92ebb8f45b86cc9659f6f512f05e1d8ade498a2d0839f0fb03d05ffc8b9bd3.exe windows x86
4c4c2db2c258a3879296806f272c80fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
FreeEnvironmentStringsA
TlsFree
HeapFree
GetTickCount
FlushFileBuffers
OpenWaitableTimerW
CompareStringW
VirtualQuery
HeapAlloc
HeapReAlloc
QueryPerformanceCounter
TlsSetValue
GetVersion
RtlUnwind
TlsAlloc
GetModuleFileNameA
GetCurrentThreadId
GetStdHandle
CloseHandle
LCMapStringA
SetFilePointer
GetCurrentProcess
CompareStringA
GetStringTypeA
InterlockedIncrement
SetLastError
GetLocalTime
ExitProcess
OpenMutexA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetStartupInfoW
GetEnvironmentStrings
CreateMutexA
WideCharToMultiByte
EnterCriticalSection
WriteFile
GetCommandLineA
GetSystemTime
LCMapStringW
GetProcAddress
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThread
DeleteCriticalSection
MultiByteToWideChar
TerminateProcess
SetEnvironmentVariableA
VirtualAlloc
GetStringTypeW
ReadFile
FreeEnvironmentStringsW
GetCommandLineW
TlsGetValue
HeapDestroy
InterlockedExchange
GetStartupInfoA
IsBadWritePtr
SetHandleCount
GetModuleFileNameW
GetModuleHandleA
GlobalFindAtomW
GetCurrentProcessId
GetLastError
GetFileType
GetSystemTimeAsFileTime
GetTimeZoneInformation
InterlockedDecrement
SetStdHandle
GetCPInfo
VirtualFree
HeapCreate
LoadLibraryA
user32
SetActiveWindow
MessageBoxIndirectW
PackDDElParam
EndTask
DdeKeepStringHandle
SetClassLongA
ReplyMessage
CheckMenuRadioItem
DdeQueryStringW
CascadeWindows
GetUpdateRect
RegisterClassA
EnumDisplaySettingsExW
SetWindowsHookA
SetClassLongW
GetClipboardViewer
RegisterClassExA
DdeCreateStringHandleA
AnyPopup
MapDialogRect
DestroyMenu
GetAncestor
InvalidateRect
CreatePopupMenu
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ