TMethodImplementationIntercept
Static task
static1
Behavioral task
behavioral1
Sample
ae8745fe0541f11ba82c50b2be341880affe41ead11bb6ff0788a132ee5f2c24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae8745fe0541f11ba82c50b2be341880affe41ead11bb6ff0788a132ee5f2c24.exe
Resource
win10v2004-20220901-en
General
-
Target
ae8745fe0541f11ba82c50b2be341880affe41ead11bb6ff0788a132ee5f2c24
-
Size
8.2MB
-
MD5
1fd2374e3da25e2d48f64cec227611a8
-
SHA1
c0b22a796c5a97c668fd96019dba3e1ff4e4f9a3
-
SHA256
ae8745fe0541f11ba82c50b2be341880affe41ead11bb6ff0788a132ee5f2c24
-
SHA512
99cdb5ae89f03ffa46835488516a90ead66b483614910e8bcc6386d947256b94d906af1a0da819f01a5166454caeccaed95d9b2fcbda10e499cf9df8a09586c7
-
SSDEEP
196608:rhs3D8sNyHNjYOVIxGEFaolfQZoy2d+1bT5Tbk6vxzR:rhLNj2x9Fd2Zjv9bk6vxzR
Malware Config
Signatures
Files
-
ae8745fe0541f11ba82c50b2be341880affe41ead11bb6ff0788a132ee5f2c24.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 1.5MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.1MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ttmqrvaz Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etanhqgx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE