Static task
static1
Behavioral task
behavioral1
Sample
aafe40d71ad0d4928350fe3149d2941f40a348534d5e12f6e893a80425babf3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aafe40d71ad0d4928350fe3149d2941f40a348534d5e12f6e893a80425babf3d.exe
Resource
win10v2004-20220901-en
General
-
Target
aafe40d71ad0d4928350fe3149d2941f40a348534d5e12f6e893a80425babf3d
-
Size
484KB
-
MD5
9e04a4757719e818620947657bc300c1
-
SHA1
545537c72ecd1b030440fef3ed41ea29a4d749b5
-
SHA256
aafe40d71ad0d4928350fe3149d2941f40a348534d5e12f6e893a80425babf3d
-
SHA512
44202168f4322e5ee36b63e391accb253aed1541f0fb716f1e522e122e751b50f5c0521173b065f5c44396b7a61e4b5e4a8b44f3430f389bcd9fd709211b8940
-
SSDEEP
12288:HDtCaa+eowXJg1XAuANKsA6IHmHBpuO2JVUii1DSsPdv:pcowXJ1uANKsA6IHWaO2JVzKDSoR
Malware Config
Signatures
Files
-
aafe40d71ad0d4928350fe3149d2941f40a348534d5e12f6e893a80425babf3d.exe windows x86
546ad454cbf16de9945eddc064b5b66a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecA
PathIsDirectoryA
ws2_32
htonl
ntohl
socket
setsockopt
gethostname
bind
getsockname
ioctlsocket
WSAIoctl
select
recvfrom
ntohs
inet_ntoa
sendto
closesocket
WSACleanup
WSAStartup
WSAGetLastError
inet_addr
htons
gethostbyname
wininet
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFileExA
InternetCloseHandle
InternetSetStatusCallback
comctl32
ord17
kernel32
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetSystemInfo
VirtualAlloc
VirtualProtect
GetUserDefaultLCID
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetLastError
ReadFile
WriteFile
SetNamedPipeHandleState
CreateFileA
CreateEventA
UnmapViewOfFile
SetEvent
WaitForSingleObject
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
Sleep
GetTickCount
ReleaseMutex
CreateMutexA
CreateProcessA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
InterlockedExchangeAdd
InterlockedCompareExchange
QueryPerformanceFrequency
EnumSystemLocalesA
CreateNamedPipeA
ConnectNamedPipe
CreateDirectoryA
FindClose
FindNextFileA
MoveFileExA
FindFirstFileA
CopyFileA
GetFileSize
OpenMutexA
CopyFileExA
GetCommandLineA
SetUnhandledExceptionFilter
GetTimeZoneInformation
HeapSize
HeapReAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCPInfo
HeapAlloc
GetVersionExA
GetStartupInfoA
ResumeThread
HeapFree
GetCurrentProcessId
IsValidLocale
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
CreateThread
GetCurrentThreadId
ExitThread
ExitProcess
RaiseException
RtlUnwind
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
QueryPerformanceCounter
SetEnvironmentVariableA
user32
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DestroyIcon
CreateDialogParamA
LoadImageA
DestroyWindow
PostQuitMessage
GetWindowRect
PtInRect
GetSysColor
IsWindowVisible
LoadCursorA
GetWindowTextA
EnableWindow
GetWindowLongA
SetWindowLongA
SendDlgItemMessageA
SetTimer
BeginPaint
LoadBitmapA
EndPaint
SetRect
DrawTextA
SetDlgItemTextA
SetWindowTextA
GetDlgItem
SetWindowPos
InvalidateRect
UpdateWindow
GetCursorPos
CreatePopupMenu
InsertMenuA
SetForegroundWindow
TrackPopupMenu
DestroyMenu
ShowWindow
SendMessageA
SetCursor
gdi32
CreateSolidBrush
PatBlt
CreateCompatibleDC
GetObjectA
BitBlt
DeleteObject
CreateFontA
SetBkMode
SetBkColor
SetTextColor
CreateFontIndirectA
GetCurrentObject
SelectObject
DeleteDC
GetStockObject
shell32
ShellExecuteA
Shell_NotifyIconA
Sections
.text Size: 208KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ