Static task
static1
Behavioral task
behavioral1
Sample
ae50a8fb81cff066e1ded491094ad6366556967e35b3c7f54e7b02176af4321c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ae50a8fb81cff066e1ded491094ad6366556967e35b3c7f54e7b02176af4321c.exe
Resource
win10v2004-20221111-en
General
-
Target
ae50a8fb81cff066e1ded491094ad6366556967e35b3c7f54e7b02176af4321c
-
Size
196KB
-
MD5
e745b2095f2c4b65bf3359daf2ea18db
-
SHA1
b326222bb1843cdccb75d3b6f140e51dc566197b
-
SHA256
ae50a8fb81cff066e1ded491094ad6366556967e35b3c7f54e7b02176af4321c
-
SHA512
edb2b178ba22c674f217c89fdbf76e6213d4172ae122dc95607dcd4463d10d1226b43bbb2165040f609817b129942fb4196623984fee7441af8ccca758cd7464
-
SSDEEP
3072:bfi7UIhetE/3B0tF1x+vzvR+Lq99PZ4mGCAJG1Rh0cC5yfoez:boz1+tF1O99PZjRh02f
Malware Config
Signatures
Files
-
ae50a8fb81cff066e1ded491094ad6366556967e35b3c7f54e7b02176af4321c.exe windows x86
f635972df2504e59ce74352fc2bdb015
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
WaitForSingleObject
CreateThread
GetCurrentProcess
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
HeapDestroy
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE