Static task
static1
Behavioral task
behavioral1
Sample
dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c.exe
Resource
win10v2004-20220901-en
General
-
Target
dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c
-
Size
812KB
-
MD5
ed50bc1a8b063d4dbb7929e38d95595d
-
SHA1
cf109a9a2f82f5fe66cd271f188c2ec90e5e6bc8
-
SHA256
dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c
-
SHA512
4d664982f0a073ed22d55b6bfe35a801784f1c00a70111877ae7976dde80973fcd8c3fdbcbe1c33d7fe398a3e1e76dd1e0dad72e377305552bf784c62a7cbdbe
-
SSDEEP
24576:EmzMUG5crCdOot43YCbWQk7kkJZtIaVpK+LErX:E1UmdcR8FJcae+LE
Malware Config
Signatures
Files
-
dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c.exe windows x86
a455cc5363ca0fc2fb24fde5288b37e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
EnterCriticalSection
SetStdHandle
SetEnvironmentVariableA
lstrcpyA
GetCurrentProcess
LeaveCriticalSection
GetStringTypeA
GetConsoleTitleA
GetTickCount
CreateMutexW
SetCurrentDirectoryA
FoldStringA
LoadLibraryA
GetShortPathNameW
GetVolumePathNameW
GetPrivateProfileIntW
DeleteFileA
SetVolumeLabelA
aaclient
OpenKeyReaderWriter
LoadClientAdapter
OpenKeyReader
g_fnStartTransport
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 1024B - Virtual size: 726B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 801KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ