Static task
static1
Behavioral task
behavioral1
Sample
aac8403db6ab8a20a6f1a33c89e9f9a98897a358f012ef7f3dbca1786f3cec02.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aac8403db6ab8a20a6f1a33c89e9f9a98897a358f012ef7f3dbca1786f3cec02.exe
Resource
win10v2004-20220901-en
General
-
Target
aac8403db6ab8a20a6f1a33c89e9f9a98897a358f012ef7f3dbca1786f3cec02
-
Size
424KB
-
MD5
6569617df1cd6d21a8b2b9e920c0abc3
-
SHA1
56dde81de54eba97e0c5d50577a5b441d855aa8f
-
SHA256
aac8403db6ab8a20a6f1a33c89e9f9a98897a358f012ef7f3dbca1786f3cec02
-
SHA512
529909c1a98e0ed03a721a6ddf620d035fd9c4338b618c2d12c8a03024fb15915db645443f79f5fda6ab10e5b1c7aba24c16bfbeae1a182c0326470a3e80a3cd
-
SSDEEP
6144:HpUu8gQj7RraxCTqsgZZiznllAjJD8b+McVsZKZEZb:quyx4I9s8l6N8e1ZAb
Malware Config
Signatures
Files
-
aac8403db6ab8a20a6f1a33c89e9f9a98897a358f012ef7f3dbca1786f3cec02.exe windows x86
3ab7da47e5a8645996bc765446b99814
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
LocalAlloc
LocalFree
FindResourceA
LockResource
LoadResource
lstrcmpA
lstrlenA
CreateMutexA
GetLastError
LoadLibraryA
CloseHandle
FreeLibrary
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalMemoryStatus
GetPrivateProfileStringA
WinExec
GetModuleFileNameA
GlobalAlloc
GlobalFree
lstrcpyA
FindFirstFileA
FindClose
CreateFileA
CreateProcessA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetFileAttributesA
LCMapStringA
GetCommandLineA
VirtualAlloc
HeapAlloc
HeapReAlloc
GetACP
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
WriteFile
HeapCreate
HeapDestroy
VirtualFree
GetEnvironmentVariableA
GetFileType
GetVersionExA
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
UnhandledExceptionFilter
GetCurrentProcess
FreeEnvironmentStringsA
TerminateProcess
ExitProcess
GetVersion
user32
TranslateMessage
DefWindowProcA
DispatchMessageA
GetMessageA
RegisterClassA
PostQuitMessage
KillTimer
SetTimer
LoadCursorA
LoadIconA
ShowWindow
CreateWindowExA
GetSystemMetrics
GetWindowTextA
IsZoomed
SetForegroundWindow
MessageBoxA
FindWindowA
CharUpperA
GetWindowLongA
wsprintfA
SetRect
EndPaint
SetCursor
DialogBoxParamA
BeginPaint
WaitForInputIdle
EndDialog
gdi32
DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SelectObject
CreateFontA
GetDeviceCaps
DeleteDC
BitBlt
SetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
CreatePalette
GetStockObject
ExtTextOutA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
sysinst
ord119
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 192KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE