Static task
static1
Behavioral task
behavioral1
Sample
ae3f2260e3f9930233cfcd6c228ddb3197432b58653b4ad6ae40af30a49c0285.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae3f2260e3f9930233cfcd6c228ddb3197432b58653b4ad6ae40af30a49c0285.exe
Resource
win10v2004-20221111-en
General
-
Target
ae3f2260e3f9930233cfcd6c228ddb3197432b58653b4ad6ae40af30a49c0285
-
Size
236KB
-
MD5
416152baa5c116fe24ecea64ad8901b7
-
SHA1
c2bfcd98ecda7eeb5afffe1e155ac433891f77d6
-
SHA256
ae3f2260e3f9930233cfcd6c228ddb3197432b58653b4ad6ae40af30a49c0285
-
SHA512
40e402d9280d135d6b86fa38d23ef3d51de4974ff7d1353f5bf26d02feafaf2d02854a425d77b6dedacb9c2b7341d14b8fc121c80e0f69a617d125ad27de54f0
-
SSDEEP
6144:KwM9v0MLgIQHF3ZEJJCYlzcinGWXGjCVMC5M0KEhDwQk8:KB9v0MmHrEJjljMGVMC5MBWDwQk8
Malware Config
Signatures
Files
-
ae3f2260e3f9930233cfcd6c228ddb3197432b58653b4ad6ae40af30a49c0285.exe windows x86
4299f5bcc3a3e733c57897448c7d6c65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
IsBadCodePtr
CreateProcessW
GetStartupInfoA
LocalAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCPInfo
VirtualProtect
InterlockedCompareExchange
user32
EnableMenuItem
DestroyIcon
LoadIconA
GetWindowThreadProcessId
RedrawWindow
DestroyWindow
IsWindowEnabled
ScrollWindow
UnregisterClassA
msvcrt
log
__setusermatherr
__p__commode
__p__fmode
_snprintf
_XcptFilter
strspn
__getmainargs
_initterm
exit
_acmdln
_except_handler3
__set_app_type
_adjust_fdiv
wcscmp
_wtoi
shell32
SHGetDesktopFolder
ExtractAssociatedIconW
SHGetFileInfoA
SHGetFileInfo
DoEnvironmentSubstW
SHBrowseForFolderA
SHAppBarMessage
oleaut32
SafeArrayCreate
GetActiveObject
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SysFreeString
VariantInit
ole32
RevokeDragDrop
CoSetProxyBlanket
CoRegisterClassObject
CoRevokeClassObject
CoGetInterfaceAndReleaseStream
StringFromIID
CLSIDFromString
ProgIDFromCLSID
CoTaskMemAlloc
StringFromGUID2
advapi32
AdjustTokenPrivileges
RegQueryInfoKeyA
FreeSid
GetSecurityDescriptorDacl
RevertToSelf
AllocateAndInitializeSid
RegEnumKeyA
comctl32
ImageList_DragLeave
PropertySheetW
version
VerQueryValueW
VerInstallFileA
GetFileVersionInfoA
VerInstallFileW
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ