Static task
static1
Behavioral task
behavioral1
Sample
e96a90d4f86909af79f326ebddb8dd45b7af31a52ba3cd3c8d9b058a39fe053a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e96a90d4f86909af79f326ebddb8dd45b7af31a52ba3cd3c8d9b058a39fe053a.exe
Resource
win10v2004-20221111-en
General
-
Target
e96a90d4f86909af79f326ebddb8dd45b7af31a52ba3cd3c8d9b058a39fe053a
-
Size
34KB
-
MD5
7e39fb21a8b21bcb1f31ac3ad9241657
-
SHA1
6934206844176ec777fa5511d1285d635416fd43
-
SHA256
e96a90d4f86909af79f326ebddb8dd45b7af31a52ba3cd3c8d9b058a39fe053a
-
SHA512
af483c66a6127282359c9419ef6426eaaf53d622513f45ca9236ff2a50c75a8c5c339dbf6abb9cfdcf07ea79749a4365aabcdd275db1710dc6011650dcf1cb7a
-
SSDEEP
768:u9ngOa5q7GSSKuAg2EyKvtstdKxAk/wGuT+9uMtpPmGDow3lh:u9g3suAg2EyKv6Pd5T+97LPvomlh
Malware Config
Signatures
Files
-
e96a90d4f86909af79f326ebddb8dd45b7af31a52ba3cd3c8d9b058a39fe053a.exe windows x86
69e77ed875e970cb611940aa81730f5e
Code Sign
67:d0:1f:61:fb:b1:25:a2:4c:85:31:ea:2b:a4:08:deCertificate
IssuerCN=AaqaqoriwaqNot Before31-12-2010 22:00Not After31-12-2039 23:59SubjectCN=Aaqaqoriwaq37:99:52:67:31:e4:33:cc:f5:f9:a1:00:5a:b5:26:a7:cd:31:29:f7Signer
Actual PE Digest37:99:52:67:31:e4:33:cc:f5:f9:a1:00:5a:b5:26:a7:cd:31:29:f7Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Aaqaqoriwaq24-11-2022 14:54 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
RegisterClassExA
PostQuitMessage
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
gdi32
GetObjectA
kernel32
LoadLibraryA
VirtualAlloc
GetModuleHandleA
GetCommandLineA
ExitProcess
GetProcAddress
Sleep
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 210B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ