Static task
static1
Behavioral task
behavioral1
Sample
aff770ca9c3f11e858d46027b5313e302bb3ebe1e970e886913f8619d2a52ee4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aff770ca9c3f11e858d46027b5313e302bb3ebe1e970e886913f8619d2a52ee4.exe
Resource
win10v2004-20221111-en
General
-
Target
aff770ca9c3f11e858d46027b5313e302bb3ebe1e970e886913f8619d2a52ee4
-
Size
345KB
-
MD5
3573ae2f0fc7906647c4d5ae40ccf5ce
-
SHA1
3e96da3eac35005ad11a7790be33077820f4fb5b
-
SHA256
aff770ca9c3f11e858d46027b5313e302bb3ebe1e970e886913f8619d2a52ee4
-
SHA512
d5e88622ab7f72b46fb4af82947c34a901975b74caa9e28913a980424fe70b2d863ed39d3e78bc9ef9267e7f637f22f331341d405587ae1eeeaeef42c3ab9d1f
-
SSDEEP
6144:joKC4aGm1USwU9sllfoMKeUcrkqk2EmYqlVskmeHUt+J53VV/z55m+m8w:AHbwHLf9KedkoEmlzJUeFWCw
Malware Config
Signatures
Files
-
aff770ca9c3f11e858d46027b5313e302bb3ebe1e970e886913f8619d2a52ee4.exe windows x86
367d5f351cb662dbbaac3dad1ad9ea4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTempPathA
CloseHandle
GetBinaryTypeA
GetFileType
GetModuleHandleW
CreateFileW
CreateFileA
GetBinaryTypeW
GetModuleHandleA
GetTempPathW
FindClose
GetStartupInfoA
user32
DestroyWindow
GetWindowTextW
DefWindowProcA
EnableWindow
ShowWindow
DefWindowProcW
CloseWindow
DrawTextW
EmptyClipboard
DrawTextA
GetWindowRect
BeginPaint
IsWindowVisible
DeleteMenu
GetWindow
CloseClipboard
GetClipboardData
GetWindowTextA
IsWindowEnabled
gdi32
FillRgn
GetDeviceCaps
BitBlt
GetStockObject
DeleteObject
CombineRgn
CreateFontIndirectA
CreateCompatibleBitmap
CreatePolygonRgn
CreateRoundRectRgn
CreateSolidBrush
CreateRectRgn
CreateCompatibleDC
FrameRgn
CreateFontIndirectW
oleaut32
SafeArrayCreate
GetErrorInfo
SafeArrayCopy
SetErrorInfo
CreateErrorInfo
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ