Static task
static1
Behavioral task
behavioral1
Sample
ae0cdb15a6cb158504e11e637a3d997d34a12ed1e8ce354bfa9f887667567b31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae0cdb15a6cb158504e11e637a3d997d34a12ed1e8ce354bfa9f887667567b31.exe
Resource
win10v2004-20220812-en
General
-
Target
ae0cdb15a6cb158504e11e637a3d997d34a12ed1e8ce354bfa9f887667567b31
-
Size
304KB
-
MD5
969d2f2380fa4a7c52e993e89c242cd0
-
SHA1
5a0181e43ad317b55dff658228cfe259ac0b3036
-
SHA256
ae0cdb15a6cb158504e11e637a3d997d34a12ed1e8ce354bfa9f887667567b31
-
SHA512
985fc9b7aeb798fccce9d9c26c1bb1b70b0a6992e1a9b6f10c8e4061f739474e89c627be99566ec21282c6a1e4dac95b782afd7e76767b0a4ac8bf88a6c72bee
-
SSDEEP
6144:rgKoNtBFtS8tik4AByHGWAqxMkZ5IVplSV5yi0nbl5G:0Dztl4lHR2kZ5K65yi0r
Malware Config
Signatures
Files
-
ae0cdb15a6cb158504e11e637a3d997d34a12ed1e8ce354bfa9f887667567b31.exe windows x86
a654eaff3f080eda43d1bbad57c74a1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
RemoveDirectoryW
FindClose
Sleep
GetStartupInfoW
GetCurrentDirectoryA
GetEnvironmentVariableA
GetTickCount
GetModuleHandleA
ExitProcess
GetStdHandle
WaitForMultipleObjects
CreateMutexW
GetTickCount
GetProfileIntA
HeapCreate
ReleaseMutex
GetFileSize
GetFileAttributesW
GetLocalTime
DeleteFileA
HeapSize
WaitForSingleObject
CloseHandle
SetLastError
user32
GetDC
CallWindowProcW
GetCursorPos
GetWindowLongA
GetDC
GetDC
GetDC
MessageBoxA
DispatchMessageW
DispatchMessageW
GetClassInfoA
PeekMessageA
GetSysColor
ctl3d32
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ