Static task
static1
Behavioral task
behavioral1
Sample
aad08465f9fb2358777a6ec77d9ecb5cf89060e1661e11fdbdec19abb7dc96c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aad08465f9fb2358777a6ec77d9ecb5cf89060e1661e11fdbdec19abb7dc96c1.exe
Resource
win10v2004-20220812-en
General
-
Target
aad08465f9fb2358777a6ec77d9ecb5cf89060e1661e11fdbdec19abb7dc96c1
-
Size
275KB
-
MD5
a86f079779cf92646067523034090420
-
SHA1
d4415a0b3ffffb595e4c8e7ae2c36599e4152778
-
SHA256
aad08465f9fb2358777a6ec77d9ecb5cf89060e1661e11fdbdec19abb7dc96c1
-
SHA512
0f28f1cb519400daa91ed29778bbbbca57a364456f1e13c639f2a0836886aea43ddc0733af8013b990c262f53fe594ed19aa9780c28635b8e1dfa10fc32af703
-
SSDEEP
6144:J1MSBz2VvMVnLITefFigf1C+XjbS/DFY3Gz27c3P:rz2yVITedJ1dTm23O
Malware Config
Signatures
Files
-
aad08465f9fb2358777a6ec77d9ecb5cf89060e1661e11fdbdec19abb7dc96c1.exe windows x86
34cbf2b4b4bb79fca0ac3c86efb7ad8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FormatMessageA
GetCurrentProcess
GetDateFormatA
GetModuleFileNameA
GetStartupInfoA
GetTickCount
GlobalAlloc
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MoveFileW
MulDiv
ReadFile
SetCurrentDirectoryA
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrcpyA
lstrlenA
user32
DestroyWindow
GetActiveWindow
GetClassInfoExW
GetForegroundWindow
PaintDesktop
RemovePropW
SetMenuDefaultItem
SetWindowPos
WindowFromPoint
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ