Static task
static1
Behavioral task
behavioral1
Sample
aef73bdf68358454d2457c41024c212efec15d607d5f50d1ad1a9c90b7f39c0f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aef73bdf68358454d2457c41024c212efec15d607d5f50d1ad1a9c90b7f39c0f.exe
Resource
win10v2004-20220812-en
General
-
Target
aef73bdf68358454d2457c41024c212efec15d607d5f50d1ad1a9c90b7f39c0f
-
Size
175KB
-
MD5
2599333a694e33fa15d4365d459256a0
-
SHA1
21876de3e03efa3bbc0d407df94d63e0a7861b56
-
SHA256
aef73bdf68358454d2457c41024c212efec15d607d5f50d1ad1a9c90b7f39c0f
-
SHA512
b3a19aaa5bc0f1c08b91a043e6efb79cb15e8ca0e1ec5276e0bb1ee6646e77212fb74cf0ad75749dc3c265a33e228d2605814c1e739f8fee9b6b468ee04108da
-
SSDEEP
3072:805jAKZJoMUCNvmfsjXTeTRtkpsaVw7h1rdMohldcFwt60RTqxqPJkcBdlrvrRsF:84oM1NvmfmXS86hVdMoviFwBqxq7jRsR
Malware Config
Signatures
Files
-
aef73bdf68358454d2457c41024c212efec15d607d5f50d1ad1a9c90b7f39c0f.exe windows x86
ce71b4dddfbd73164e5162975cf3899e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
lstrcpyn
GlobalFindAtomA
ExitThread
GetOEMCP
GetLocalTime
DeleteAtom
LoadResource
SetConsolePalette
LoadLibraryExA
SetCommBreak
GlobalFree
LocalSize
GetProcessHeap
CloseHandle
VirtualAlloc
GetProfileStringA
GlobalLock
GlobalAddAtomA
GetStdHandle
RaiseException
user32
GetWindowTextA
EndPaint
GetClassNameA
GetWindow
GetForegroundWindow
CloseWindow
GetActiveWindow
AlignRects
GetWindowTextLengthA
GetFocus
GetParent
GetDC
DrawEdge
ReleaseDC
BeginPaint
GetClassInfoExA
IsIconic
ShowWindow
ValidateRect
wsock32
WSAStartup
WSACleanup
WSAAsyncGetServByPort
WSASetBlockingHook
WSAGetLastError
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ