Static task
static1
Behavioral task
behavioral1
Sample
aa608412735431e54b9641e896586d989282a92c02b0ad8cfcf34fd1cce62603.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa608412735431e54b9641e896586d989282a92c02b0ad8cfcf34fd1cce62603.exe
Resource
win10v2004-20220812-en
General
-
Target
aa608412735431e54b9641e896586d989282a92c02b0ad8cfcf34fd1cce62603
-
Size
9KB
-
MD5
f96a14e3b067763590d1223c1402c4dd
-
SHA1
b00c2244c2417e638b8b0fdbf62f15a2be698474
-
SHA256
aa608412735431e54b9641e896586d989282a92c02b0ad8cfcf34fd1cce62603
-
SHA512
b175c6c52c270c07e34f3b85f0d5b22e3fe84e17b19d01efa99a6ffb546cc9871ae2939f0d4b39941ad952dc40733b0cbfa342d30bcd5e6846a32e745db8b526
-
SSDEEP
96:OPjKzTr/s35fVmJoFgDMP9/XGcr5uDhqm1rRMgRGRaJ7CHqyYsBBnH0pED1XGhGX:O7gsFgDyjr5iqMFM6IaJ7CKyRL0O8zJ
Malware Config
Signatures
Files
-
aa608412735431e54b9641e896586d989282a92c02b0ad8cfcf34fd1cce62603.exe windows x86
0de7559f373be3d3e9634e14e9b91b56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
LocalFree
ExitThread
lstrlenA
FreeConsole
CloseHandle
FindVolumeClose
GetDriveTypeA
GetExitCodeProcess
SetEvent
VirtualAlloc
ReadFile
CreateFileW
GetPrivateProfileIntW
GetComputerNameW
GlobalFree
ReleaseMutex
GetLocalTime
GetTickCount
GetModuleHandleW
user32
GetSysColor
CreateWindowExA
GetMenu
GetDlgItem
GetClientRect
DrawStateW
GetCaretPos
CallWindowProcA
GetClassInfoA
DispatchMessageA
GetCursorInfo
GetKeyState
EndDialog
clbcatq
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ