Static task
static1
Behavioral task
behavioral1
Sample
ae08d005f44137ac096357f08ea9ef1502cf4c8a105f1f85b124e409e0155670.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ae08d005f44137ac096357f08ea9ef1502cf4c8a105f1f85b124e409e0155670.exe
Resource
win10v2004-20220812-en
General
-
Target
ae08d005f44137ac096357f08ea9ef1502cf4c8a105f1f85b124e409e0155670
-
Size
29KB
-
MD5
05b48a19a7fe8db9cf9fb27f60b18619
-
SHA1
b6bd07a4df74f459a22375fb044795a4f0d8415d
-
SHA256
ae08d005f44137ac096357f08ea9ef1502cf4c8a105f1f85b124e409e0155670
-
SHA512
ece8fe402f1c5232b0b03323bff4f727c667b18d12e8653ecedfc7317695a9bdc032750c3354a9dea2bd0183056392d131b71a2b29660e63655a41af28b23c7c
-
SSDEEP
192:2/pxRx5c2jnfHKxImLqWyudnIFJzRh+4MtS0U+Yoamj:2/Dz6AqxImLqWyynIJz3/MtS0U+Yojj
Malware Config
Signatures
Files
-
ae08d005f44137ac096357f08ea9ef1502cf4c8a105f1f85b124e409e0155670.exe windows x86
93a6d02efea601d5b1d6a3a4bc5f4599
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetFileSize
GetStartupInfoA
Sleep
GetVersion
GetCommandLineA
lstrcatA
GetModuleHandleA
GetLastError
GetVersionExA
GetTickCount
msvcrt
rand
exit
_acmdln
_controlfp
wcstoul
toupper
__setusermatherr
__p__commode
memmove
wcschr
__getmainargs
_except_handler3
_c_exit
_exit
_initterm
wcslen
gdi32
ExtTextOutA
GetTextColor
GetObjectA
MoveToEx
BitBlt
SetROP2
CreateCompatibleDC
SetBkMode
DeleteObject
GetBkColor
GetDeviceCaps
SetPixel
CreateSolidBrush
SelectObject
GetPixel
CreateFontIndirectA
GetTextExtentPoint32A
PatBlt
Sections
.text Size: 512B - Virtual size: 467B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1016KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ