Static task
static1
Behavioral task
behavioral1
Sample
aaf4cf315652d9af23860a083d514ecbf7dc7ab9a4eca397fa6a60221df505ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaf4cf315652d9af23860a083d514ecbf7dc7ab9a4eca397fa6a60221df505ac.exe
Resource
win10v2004-20221111-en
General
-
Target
aaf4cf315652d9af23860a083d514ecbf7dc7ab9a4eca397fa6a60221df505ac
-
Size
284KB
-
MD5
be29c5238d336c002377dfb3c103b704
-
SHA1
67a1e96dbfac92d4f947ce0b35267726dc40dcb0
-
SHA256
aaf4cf315652d9af23860a083d514ecbf7dc7ab9a4eca397fa6a60221df505ac
-
SHA512
6c0f8335d684aa35de1509d6f3e515b80e711a245e88eba6217e010ef4239a7c4b8a8e608d89e54843e8a36a4d406d0d78e49db0bcc729a34705f7b37461624c
-
SSDEEP
6144:WG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:h/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
Files
-
aaf4cf315652d9af23860a083d514ecbf7dc7ab9a4eca397fa6a60221df505ac.exe windows x86
e142c9fe1095872cf6ff3b5d41a860c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
GetCurrentProcessId
GetStdHandle
HeapCreate
GetEnvironmentStringsA
WriteConsoleA
DeleteAtom
OpenSemaphoreA
InterlockedExchange
GetThreadPriority
GetExpandedNameA
FlushFileBuffers
LoadLibraryA
HeapDestroy
GetCurrentProcess
GetModuleHandleA
GetCurrentThread
VirtualProtect
GetACP
IsDebuggerPresent
FormatMessageA
user32
DrawTextA
BeginPaint
SetForegroundWindow
GetParent
GetFocus
ShowWindow
GetWindow
GetCursorPos
GetDlgItem
DragDetect
wsprintfA
FillRect
GetClassNameA
ReleaseDC
SetActiveWindow
EndPaint
GetWindowTextLengthA
GetTitleBarInfo
FrameRect
advapi32
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyA
RegFlushKey
RegCreateKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ