Static task
static1
Behavioral task
behavioral1
Sample
aa93073e21ad6854c2879ba0f13e1beae15b39cd459420afb9f168e2620f01e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa93073e21ad6854c2879ba0f13e1beae15b39cd459420afb9f168e2620f01e5.exe
Resource
win10v2004-20220812-en
General
-
Target
aa93073e21ad6854c2879ba0f13e1beae15b39cd459420afb9f168e2620f01e5
-
Size
656KB
-
MD5
5dab8c07d80f2568df2f7df75835e959
-
SHA1
34df17ae94e8943dd25a6ef91072cc6a536f4bc1
-
SHA256
aa93073e21ad6854c2879ba0f13e1beae15b39cd459420afb9f168e2620f01e5
-
SHA512
0b2313c26e3992be1f6cde83957a887b67ff1d3d5283d3a355f1d2898a12e9881d94e5ff8a290aec839a9d8c5d58aa6180fc56a85049fe32cd8e3eccbe9410d1
-
SSDEEP
12288:wcNoUjHj7FT2HCH8mzJveEeKqKymc+pNKmBNXpUr3DJFZryNYbzFHz:zSUDB2HOEEedFhKPBNXpK3bF2YbzN
Malware Config
Signatures
Files
-
aa93073e21ad6854c2879ba0f13e1beae15b39cd459420afb9f168e2620f01e5.exe windows x86
184505fd3239804413e8e3f932a23a13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3574
msvcrt
__dllonexit
kernel32
CreateProcessA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
FindWindowA
gdi32
GetStockObject
advapi32
FreeSid
shell32
Shell_NotifyIconA
comctl32
_TrackMouseEvent
ole32
OleRun
oleaut32
SysFreeString
msvcp60
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
wsock32
recvfrom
iphlpapi
GetIfTable
winmm
timeSetEvent
ws2_32
WSAEventSelect
mainpro
IcafeStart
Sections
.text Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XMX0 Size: - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.XMX1 Size: 644KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE