Static task
static1
Behavioral task
behavioral1
Sample
aa2619e4ad880ea4ee094742e0ac83029397614f91dc732737bcb5d6bb1bdd50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa2619e4ad880ea4ee094742e0ac83029397614f91dc732737bcb5d6bb1bdd50.exe
Resource
win10v2004-20221111-en
General
-
Target
aa2619e4ad880ea4ee094742e0ac83029397614f91dc732737bcb5d6bb1bdd50
-
Size
811KB
-
MD5
c96a0d9134788a4281d05831da5211f0
-
SHA1
dd67fc5f5b027fd2bda1103096dbb4f66f714776
-
SHA256
aa2619e4ad880ea4ee094742e0ac83029397614f91dc732737bcb5d6bb1bdd50
-
SHA512
c5b09f5d9269e366a41e424cb3b02905da7adf17552972ed62ef6228ae92b655bca78926edea0afff83a82f4ca149e5afc61234ae3a1c35c443543d7f7d28c5d
-
SSDEEP
12288:kh9qcm/YG8CAt0qiC/a+2yfBCrMC7sCLs3TSvTOjf97RblmffgTNYMWHdWbVeWnR:55CdjosjSLOjF7RcngTeMWkBe4EK
Malware Config
Signatures
Files
-
aa2619e4ad880ea4ee094742e0ac83029397614f91dc732737bcb5d6bb1bdd50.exe windows x86
6e1d2248e9204fa68e93c3747c2df13e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCalendarInfoW
TlsGetValue
GetDriveTypeA
VirtualProtectEx
GetModuleFileNameA
FindClose
WriteConsoleW
GetCommandLineW
CreateDirectoryW
GetFileTime
LocalLock
GetStartupInfoA
RemoveDirectoryA
GetCurrentThreadId
EnterCriticalSection
GlobalFree
GetLocalTime
GetConsoleMode
InitializeCriticalSection
CloseHandle
DeleteFileA
Sleep
GetModuleHandleA
CreateFileA
user32
IsWindowVisible
PeekMessageA
wsprintfA
IsWindow
GetSysColor
GetWindowLongA
FillRect
EqualRect
GetWindowDC
IsWindowEnabled
MessageBoxA
GetWindowLongA
DispatchMessageA
cryptdlg
CertConfigureTrustA
CertTrustCertPolicy
CertTrustCleanup
CertConfigureTrustW
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE