Static task
static1
Behavioral task
behavioral1
Sample
ae2975b8a40525aec2e38c09cb898e40b2389fc4849eafbbb7f640686a17af6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ae2975b8a40525aec2e38c09cb898e40b2389fc4849eafbbb7f640686a17af6e.exe
Resource
win10v2004-20221111-en
General
-
Target
ae2975b8a40525aec2e38c09cb898e40b2389fc4849eafbbb7f640686a17af6e
-
Size
2.8MB
-
MD5
36e53e9d254a5a248d819db7e6a169b5
-
SHA1
124ed9d0f026c2eb5cea7b4d52e8847d939fc007
-
SHA256
ae2975b8a40525aec2e38c09cb898e40b2389fc4849eafbbb7f640686a17af6e
-
SHA512
8750e7cb7a1c2925cdab0af40e1a35e809a7c206ed926e7b7e78cd6af5b5e84dd7ae7f306e85b0a244f5c1ce52c59c5668fec9819cbaa60866ce1caa2ef025ed
-
SSDEEP
49152:3y/uF4NYVLCSPbNo5tCpWTo1+G3Ya9LDvP/5llN6nIKUpOkOLrmb4+JTx/HvSHMN:bF4NYVLCSPKbCpWT3G3YaRDvP/5lzKU1
Malware Config
Signatures
Files
-
ae2975b8a40525aec2e38c09cb898e40b2389fc4849eafbbb7f640686a17af6e.exe windows x86
77122f99f2128b719aa7861a971ed01b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleFileNameExA
kernel32
IsProcessorFeaturePresent
user32
CharUpperBuffA
gdi32
RectVisible
msimg32
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyA
shell32
SHGetFileInfoA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
ole32
OleIsCurrentClipboard
oleaut32
SysAllocString
oledlg
ord8
wsock32
WSASetLastError
gdiplus
GdipGetImageGraphicsContext
oleacc
LresultFromObject
wininet
InternetOpenA
imm32
ImmGetOpenStatus
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 918KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ