Static task
static1
Behavioral task
behavioral1
Sample
ae7c8d855096b0f788eaee5a583d506c38fda9c3862b08febdc135c49767cd23.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae7c8d855096b0f788eaee5a583d506c38fda9c3862b08febdc135c49767cd23.exe
Resource
win10v2004-20220901-en
General
-
Target
ae7c8d855096b0f788eaee5a583d506c38fda9c3862b08febdc135c49767cd23
-
Size
173KB
-
MD5
4dfbf01e6cfd68354cc21b2452d2e383
-
SHA1
24a0eb70bd9ae552b951588e09150f55f87daaa1
-
SHA256
ae7c8d855096b0f788eaee5a583d506c38fda9c3862b08febdc135c49767cd23
-
SHA512
e2ddb015e3ed07f05d802807c85535597eaef94bd22a1596c9aad767d7d1e2b4b6fd8b980eb085004ebd331f742d0f74654a6d3e61363b9e5f2e1c6a214ccd21
-
SSDEEP
3072:EH285W8J1Ms5ocafYx6gXXvjdYYqkCTTLLpbqht4nsprm2SMz7xSDD:E/5NMPcafYx6gHLSKKb6yngrm2Fm
Malware Config
Signatures
Files
-
ae7c8d855096b0f788eaee5a583d506c38fda9c3862b08febdc135c49767cd23.exe windows x86
2a0c0f846107a474feadd66277a9737e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
EnterCriticalSection
FlushInstructionCache
TlsGetValue
WaitForSingleObject
lstrlenA
GlobalAlloc
FindAtomA
lstrlenW
RaiseException
GetCurrentThreadId
SetLastError
GlobalLock
GetCurrentProcess
GlobalFree
CloseHandle
MultiByteToWideChar
SetUnhandledExceptionFilter
LocalAlloc
GetTickCount
TlsFree
InterlockedDecrement
CreateFileW
TlsAlloc
SetLastError
lstrcmpW
EnumResourceNamesA
InterlockedExchange
GetOEMCP
TlsSetValue
GetLocaleInfoW
LeaveCriticalSection
MulDiv
GetStringTypeA
GlobalHandle
GetComputerNameW
InterlockedIncrement
InitializeCriticalSection
HeapSetInformation
GlobalUnlock
FormatMessageW
DeleteCriticalSection
WideCharToMultiByte
shlwapi
StrRetToStrA
PathIsContentTypeA
PathIsFileSpecA
PathAppendA
SHCreateStreamOnFileEx
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 91KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ