Static task
static1
Behavioral task
behavioral1
Sample
ae824c3e0867e4fb7c8ca7c2861ee03be8106db308b62d3e8305b60f492beff2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae824c3e0867e4fb7c8ca7c2861ee03be8106db308b62d3e8305b60f492beff2.exe
Resource
win10v2004-20221111-en
General
-
Target
ae824c3e0867e4fb7c8ca7c2861ee03be8106db308b62d3e8305b60f492beff2
-
Size
120KB
-
MD5
f66e22130e32185da2a555d4ea848ffc
-
SHA1
803ee1a74960aef4acde37c6f9268ee798a88981
-
SHA256
ae824c3e0867e4fb7c8ca7c2861ee03be8106db308b62d3e8305b60f492beff2
-
SHA512
b0e693f2e0946a758830b55e593ab755930c7e5b7163e1d4f7b199ca4483246f55dadd64112dad31743b4cbcbcfe63e8513e9c8aeb879a8a1c8d70b20a1ac49e
-
SSDEEP
3072:SK/D2FKJ6bZM90AaiXi1kuW56IYblOxdI0:SK/H6qVaiSW56IiU0
Malware Config
Signatures
Files
-
ae824c3e0867e4fb7c8ca7c2861ee03be8106db308b62d3e8305b60f492beff2.exe windows x86
1a1e63a0d31b0dad700e1c50cc064091
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ConnectNamedPipe
ContinueDebugEvent
CreateFiber
CreateFileA
CreateIoCompletionPort
DeleteAtom
DeviceIoControl
DisconnectNamedPipe
ExitProcess
FindAtomA
FindResourceExA
GetACP
GetAtomNameA
GetCommandLineA
GetFileType
GetModuleHandleA
GetProcAddress
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetThreadContext
GetThreadPriorityBoost
GetUserDefaultLangID
GlobalAlloc
GlobalHandle
GlobalReAlloc
GlobalWire
IsBadWritePtr
IsSystemResumeAutomatic
OutputDebugStringA
SetErrorMode
SetEvent
SetUnhandledExceptionFilter
SignalObjectAndWait
UpdateResourceA
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForMultipleObjectsEx
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
free
ftell
fwrite
malloc
memset
rewind
signal
strcpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE