Static task
static1
Behavioral task
behavioral1
Sample
aae3941d56359d1075326fd1c501fd028534efe6db5924cb0b4ed48078ab97f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aae3941d56359d1075326fd1c501fd028534efe6db5924cb0b4ed48078ab97f1.exe
Resource
win10v2004-20220812-en
General
-
Target
aae3941d56359d1075326fd1c501fd028534efe6db5924cb0b4ed48078ab97f1
-
Size
352KB
-
MD5
a5e0e29d5b862662b59ba0f686c73240
-
SHA1
96e29d9e7e4837512fca337ad9aed25c5fe1cea3
-
SHA256
aae3941d56359d1075326fd1c501fd028534efe6db5924cb0b4ed48078ab97f1
-
SHA512
3fb7138bcdca4252037d58a5705f576936ad5731495311c0eea32f9a9c279a06d9289331296769316ffee470c095562e681ea5391c54b702295e138c341c6fc1
-
SSDEEP
6144:tgkgY3+3E05ybdwpF4cuPPeuaURhubgyw0JomzfpfyMjAGgPz+0xbOrH67:tkY3KOwoTPTrIbgLg1ANPxSa7
Malware Config
Signatures
Files
-
aae3941d56359d1075326fd1c501fd028534efe6db5924cb0b4ed48078ab97f1.exe windows x86
9e6e035ada49502be779a7b9978f946d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentDirectoryA
CloseHandle
UnmapViewOfFile
PulseEvent
GetModuleHandleA
GetSystemTime
GlobalUnlock
lstrcatA
lstrlenA
CreateThread
CreateFileW
LoadLibraryW
GetCommandLineW
HeapCreate
ResetEvent
FindClose
LocalFree
GetComputerNameA
Sleep
user32
GetDlgItem
DrawEdge
DispatchMessageA
DrawMenuBar
FillRect
CallWindowProcA
CheckRadioButton
GetScrollBarInfo
SetFocus
GetKeyState
CreateWindowExA
IsWindow
GetDC
clbcatq
UpdateFromAppChange
SetSetupOpen
CheckMemoryGates
SetupOpen
DowngradeAPL
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ