Static task
static1
Behavioral task
behavioral1
Sample
aaf76b4173dea04d30e7294e781d5fc07d2a349780c8e225a5499dced2c5421d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaf76b4173dea04d30e7294e781d5fc07d2a349780c8e225a5499dced2c5421d.exe
Resource
win10v2004-20220812-en
General
-
Target
aaf76b4173dea04d30e7294e781d5fc07d2a349780c8e225a5499dced2c5421d
-
Size
29KB
-
MD5
0e341fc3558c471acaa5d04e87ccff37
-
SHA1
2c315fe698b345ec20732299f35d3e121dcf17ef
-
SHA256
aaf76b4173dea04d30e7294e781d5fc07d2a349780c8e225a5499dced2c5421d
-
SHA512
8cf1c9b94c61f5ea542d8ef782d229e665f2e336cec081e68a85a126ebdefd9fe2d8e37158fa55b3a9b7dc81c65f5a591655cd0bfd91231245fc9d17abb681b8
-
SSDEEP
768:UMd4imeRglLxX8FaCUqQtMkcIGjb/ZQNdGDTVf:UlTug/X8FaCaKaG//ZaGD5
Malware Config
Signatures
Files
-
aaf76b4173dea04d30e7294e781d5fc07d2a349780c8e225a5499dced2c5421d.exe windows x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 21KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 956B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ