Static task
static1
Behavioral task
behavioral1
Sample
aa1eef4a991cf30ae3cb851b1c93badfdde5856ca2baac2d0266e8d024608c2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa1eef4a991cf30ae3cb851b1c93badfdde5856ca2baac2d0266e8d024608c2b.exe
Resource
win10v2004-20220812-en
General
-
Target
aa1eef4a991cf30ae3cb851b1c93badfdde5856ca2baac2d0266e8d024608c2b
-
Size
96KB
-
MD5
d78da5e8cb6b0e6acdab85b4ff4a4310
-
SHA1
3ead8b2e85681bfd0c8ae140b23aef7fbfaff7bd
-
SHA256
aa1eef4a991cf30ae3cb851b1c93badfdde5856ca2baac2d0266e8d024608c2b
-
SHA512
a91470ceb06f821002ccf9f97cb949de740cdf7970dbfd10df0d5f5ad77dd5b69b78b242585bba0f63865dc2c93d6c927f5aaf8f4ce0eeda63002a21e1eae403
-
SSDEEP
1536:tdDkLaoodWqHwAzjBmWLb3KAZTop/Jh/fn/JdvTV6vgJM7O8JdlZ:ELaMqQA33LbUv/ffZ6vW8JdlZ
Malware Config
Signatures
Files
-
aa1eef4a991cf30ae3cb851b1c93badfdde5856ca2baac2d0266e8d024608c2b.exe windows x86
961585ca7cc6e488aaf62d7bed192ec8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
urlmon
URLDownloadToCacheFileA
comctl32
InitCommonControlsEx
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
PathAddBackslashA
kernel32
Sleep
FreeLibrary
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
OutputDebugStringA
GetSystemDirectoryA
WritePrivateProfileStringA
GetVersionExA
GetTickCount
lstrcpynA
GetExitCodeProcess
GetFileAttributesA
CreateMutexA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetEnvironmentVariableA
_lclose
_llseek
_lopen
MultiByteToWideChar
TerminateProcess
Process32Next
GetPriorityClass
GetTimeZoneInformation
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
LockResource
LoadResource
FindResourceA
LocalFree
FormatMessageA
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
VirtualAlloc
SetFilePointer
VirtualQuery
InterlockedExchange
HeapSize
HeapReAlloc
RtlUnwind
InitializeCriticalSection
GetCurrentProcessId
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetSystemInfo
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetProcAddress
FlushFileBuffers
CompareStringA
CompareStringW
OpenProcess
SetEnvironmentVariableA
VirtualProtect
SetStdHandle
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetStartupInfoA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
MsgWaitForMultipleObjects
CreateDialogParamA
SetWindowTextA
MoveWindow
SetFocus
SetForegroundWindow
LoadIconA
LoadCursorA
SetCursor
SendMessageA
PeekMessageA
IsDialogMessageA
CharNextA
DispatchMessageA
SetDlgItemTextA
GetDlgItem
EnableWindow
DestroyWindow
GetWindowRect
SystemParametersInfoA
GetSystemMetrics
ExitWindowsEx
LoadStringA
wsprintfA
CharPrevA
MessageBoxA
TranslateMessage
ShowWindow
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ