Static task
static1
Behavioral task
behavioral1
Sample
aa22751296bb085aef7200c53bb9a3b5ab239e02b25d1c0e1efd117cd66ddd47.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa22751296bb085aef7200c53bb9a3b5ab239e02b25d1c0e1efd117cd66ddd47.exe
Resource
win10v2004-20221111-en
General
-
Target
aa22751296bb085aef7200c53bb9a3b5ab239e02b25d1c0e1efd117cd66ddd47
-
Size
1.8MB
-
MD5
cfe6c4dc5c9a608728b086a49d3f7c59
-
SHA1
be8febe2894b3c77bc0cc2b5f344e494731e7439
-
SHA256
aa22751296bb085aef7200c53bb9a3b5ab239e02b25d1c0e1efd117cd66ddd47
-
SHA512
5d234c726086f64b6935f5105af0b3fdbf26ec443d995fdbc5af29d6544f818059bba8b98e8b776d9513314a6a294508d2d72fbf66915e0df19e7ff7db8bddbf
-
SSDEEP
49152:fSNr+DjVlZo9hEPkwOLZq04uLaWjuggJD8IXOTz:+0jVomPk3LR4uLaWju1D8IXOTz
Malware Config
Signatures
Files
-
aa22751296bb085aef7200c53bb9a3b5ab239e02b25d1c0e1efd117cd66ddd47.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lf2m5krq Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8tbkc8eh Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6tqlca16 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arwsmj2d Size: 613KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ifpanedu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ