Static task
static1
Behavioral task
behavioral1
Sample
aa3ca83bc4601454121c500cfce64a7af71438b84eb008f0ec74f0b16ed8c67b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa3ca83bc4601454121c500cfce64a7af71438b84eb008f0ec74f0b16ed8c67b.exe
Resource
win10v2004-20220812-en
General
-
Target
aa3ca83bc4601454121c500cfce64a7af71438b84eb008f0ec74f0b16ed8c67b
-
Size
22KB
-
MD5
8a9aed52c7f3515dc546fffe6ddd1704
-
SHA1
fadeaaa08564b8e512a5fde7c8b2e087ae3593d9
-
SHA256
aa3ca83bc4601454121c500cfce64a7af71438b84eb008f0ec74f0b16ed8c67b
-
SHA512
3e1481456044bfadcb8a95019195d845b493d090eb4b91277ee7f43f55d86ad0f41163811b3698b24760f609f650dafece97262d4a8cf260935ddaab547379de
-
SSDEEP
384:xm/ch70gSHBaTnFlKKgO5I1CehYFBt4BPnVmpVGLrCAHo/vs38G+/:x174HkTnFlKKxGricPVIAQvsMP/
Malware Config
Signatures
Files
-
aa3ca83bc4601454121c500cfce64a7af71438b84eb008f0ec74f0b16ed8c67b.exe windows x86
7cfe008c800230e9fe42c1fbd7ea5a5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
OpenEventW
GetThreadLocale
GetProcAddress
GetPrivateProfileSectionNamesW
WaitNamedPipeW
GetTapeStatus
CreateEventW
CreateFileW
Sleep
Sleep
GetThreadContext
VerifyConsoleIoHandle
MultiByteToWideChar
user32
WINNLSGetEnableStatus
LoadImageW
MonitorFromPoint
GetUpdateRgn
PrivateExtractIconsW
GetClassLongA
MapVirtualKeyExA
RegisterServicesProcess
LoadLocalFonts
DefFrameProcA
Sections
code Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ