Static task
static1
Behavioral task
behavioral1
Sample
ae13c2af8769b9dd354f38832f6fc2dea703af8fb80f66d1b980b31a63805926.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae13c2af8769b9dd354f38832f6fc2dea703af8fb80f66d1b980b31a63805926.exe
Resource
win10v2004-20220812-en
General
-
Target
ae13c2af8769b9dd354f38832f6fc2dea703af8fb80f66d1b980b31a63805926
-
Size
317KB
-
MD5
c0f92f72db39acd7a6e5853ee4a26090
-
SHA1
aaca702244ca05838870cd717d85d55b4a7276b3
-
SHA256
ae13c2af8769b9dd354f38832f6fc2dea703af8fb80f66d1b980b31a63805926
-
SHA512
7dbc570b46664fb77160f345fc9e9282f465336e32c0e0a4f9842f324824e8c9b238990d0b8a03dc2cee08d3c6e5822a4e7352f0408d34336f6cb0dbcfbcc950
-
SSDEEP
6144:8ZQfeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:8ZXnX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
Files
-
ae13c2af8769b9dd354f38832f6fc2dea703af8fb80f66d1b980b31a63805926.exe windows x86
23dd1c16a2d40b74af3e3d06f071375e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileStringA
IsBadCodePtr
SetConsolePalette
VirtualProtect
EnterCriticalSection
HeapCreate
GlobalAddAtomA
LocalFree
CloseHandle
FreeConsole
lstrcat
GlobalUnlock
GlobalAddAtomA
RaiseException
LoadLibraryExA
DeleteAtom
GetOEMCP
GlobalFree
GetStdHandle
LoadResource
GetLastError
user32
BeginPaint
EndPaint
GetFocus
AlignRects
GetDC
GetWindowTextLengthA
CloseWindow
GetActiveWindow
GetClassInfoExA
GetForegroundWindow
GetWindow
GetParent
GetClassNameA
GetWindowTextA
ReleaseDC
IsIconic
DrawEdge
ValidateRect
ShowWindow
mprapi
MprAdminUserRead
MprAdminUserClose
MprAdminUserWrite
MprAdminUserGetInfo
MprAdminUserOpen
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ