Static task
static1
Behavioral task
behavioral1
Sample
aa0a6427f03fcd60a2a9799d0d8d620a361a7a674ea27151bc3c7d2d5e7205fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa0a6427f03fcd60a2a9799d0d8d620a361a7a674ea27151bc3c7d2d5e7205fc.exe
Resource
win10v2004-20221111-en
General
-
Target
aa0a6427f03fcd60a2a9799d0d8d620a361a7a674ea27151bc3c7d2d5e7205fc
-
Size
456KB
-
MD5
50503723dbcadfa35b4bbc84d17f8900
-
SHA1
9cc27ef2aa4bea469835ac8dc7315750fc93f41f
-
SHA256
aa0a6427f03fcd60a2a9799d0d8d620a361a7a674ea27151bc3c7d2d5e7205fc
-
SHA512
a27dc6c523e496a64a5e45587c0a0ad1bf1928e83dd51f943aa85b650db3c0c79875e7b007254d45627e0b66ee4056f60463bbb59c73a6fcd88b25399257e0c3
-
SSDEEP
6144:muihiOgCd5GW6kKWHk4eyAD/bkxbdl6MgHQNb1VgJq/7UHzeRqwP27PtIVGGyuDr:mu1Cd5G/5v4eyAD/bOdl/KqA3jIgxg
Malware Config
Signatures
Files
-
aa0a6427f03fcd60a2a9799d0d8d620a361a7a674ea27151bc3c7d2d5e7205fc.exe windows x86
f0dd9240c6929ee847d13968390be2e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetSystemTimeAdjustment
VirtualProtect
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetModuleFileNameA
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetProcAddress
LoadLibraryA
SetStdHandle
ReadFile
GetACP
GetOEMCP
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ