Static task
static1
Behavioral task
behavioral1
Sample
dcf55994d20464d6b8977bdbd16c305f63c4121d9a227b775344af87a2ca34d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcf55994d20464d6b8977bdbd16c305f63c4121d9a227b775344af87a2ca34d4.exe
Resource
win10v2004-20220901-en
General
-
Target
dcf55994d20464d6b8977bdbd16c305f63c4121d9a227b775344af87a2ca34d4
-
Size
34KB
-
MD5
79ffad40f942cac681320e0ae465ae5d
-
SHA1
8e43db416ed9a5b33ead9440ba28efd8008bba06
-
SHA256
dcf55994d20464d6b8977bdbd16c305f63c4121d9a227b775344af87a2ca34d4
-
SHA512
928a7e5f66384c03d7d743ca6c665e3f7f56759e4a50af6a962de304c386f8eee25fd3fa961b20789dc4e35717dfedbfa32f3e12716ceec8a3fa228a9522532e
-
SSDEEP
768:4n95sOwvOmiwiq5rJWK/u9QI1ERmisjVz7YD635:+4Owvx5xS93uc4DA
Malware Config
Signatures
Files
-
dcf55994d20464d6b8977bdbd16c305f63c4121d9a227b775344af87a2ca34d4.exe windows x86
eef57964627f8f2191d38b5da0ef9704
Code Sign
66:0e:55:c0:ec:64:71:a7:4e:c6:5a:b1:b8:e0:a6:c9Certificate
IssuerCN=AarowiqiwaNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Aarowiqiwa77:dc:71:4e:1b:46:83:5b:99:00:c9:0b:e7:c7:e6:36:95:90:2d:bbSigner
Actual PE Digest77:dc:71:4e:1b:46:83:5b:99:00:c9:0b:e7:c7:e6:36:95:90:2d:bbDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Aarowiqiwa01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
ShowWindow
PostQuitMessage
UpdateWindow
LoadIconA
GetMessageA
DefWindowProcA
TranslateMessage
CreateWindowExA
kernel32
GetModuleHandleA
GetCommandLineA
ExitProcess
VirtualAlloc
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE