Static task
static1
Behavioral task
behavioral1
Sample
aabf1c0b5b7698b242b848bde3a735cca4603c708905d6ca6ed7a08559b3e4ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aabf1c0b5b7698b242b848bde3a735cca4603c708905d6ca6ed7a08559b3e4ea.exe
Resource
win10v2004-20220812-en
General
-
Target
aabf1c0b5b7698b242b848bde3a735cca4603c708905d6ca6ed7a08559b3e4ea
-
Size
605KB
-
MD5
7d27fe3a0e30f09ce12294fbaab0b8b7
-
SHA1
3119747ce72598fbe4b3d0e69ba5f2805275af25
-
SHA256
aabf1c0b5b7698b242b848bde3a735cca4603c708905d6ca6ed7a08559b3e4ea
-
SHA512
624ee905bba64ec577ccec82044b400d34a782bf78ae98eae8c4496c00eaa172544164184ce48bc952b0b1fe40e4492186beceb5974179e8fe1d3020dbc9bcac
-
SSDEEP
12288:oaj/k1LcS1mFO5O09y58vtpfEmlzK28iXg8a8J8Y4opWl:oaj81L5/yObf5Bb8z8dJqh
Malware Config
Signatures
Files
-
aabf1c0b5b7698b242b848bde3a735cca4603c708905d6ca6ed7a08559b3e4ea.exe windows x86
e1e81f641907ffbc1528edc0c3184464
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentThreadId
GetVersion
GetTickCount
GetLastError
GetCurrentProcessId
ExitProcess
GetModuleHandleA
VirtualAlloc
FindResourceA
IsBadReadPtr
Sleep
VirtualFree
HeapCreate
IsValidCodePage
InterlockedExchange
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
WideCharToMultiByte
GetCommandLineW
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
CreateFileA
GetFileType
CreateEventA
CreateFileW
GetProcAddress
DuplicateHandle
CreateFileMappingA
CompareStringA
FindFirstFileA
GetProcessHeap
GlobalLock
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
IsBadWritePtr
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GetConsoleMode
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FreeLibrary
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteFile
lstrcmpiA
GetCPInfo
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
GetStdHandle
HeapDestroy
LockResource
WaitForSingleObject
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetSystemTimeAsFileTime
user32
SetCursor
CallWindowProcA
GetClientRect
IsWindowVisible
SystemParametersInfoA
MoveWindow
GetDesktopWindow
ScreenToClient
GetDlgItem
SetTimer
SetWindowTextA
SetWindowLongA
GetWindowRect
EndPaint
CreateWindowExA
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
TranslateMessage
EnableWindow
UpdateWindow
GetParent
DestroyWindow
SendMessageA
DrawTextA
GetDC
DispatchMessageA
SetWindowPos
PostQuitMessage
Sections
.text Size: 573KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ