Static task
static1
Behavioral task
behavioral1
Sample
ae37757116ec9069b1e39cda4eec8afd64ae1e43a5a1f1b883cc50ddd92d647a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae37757116ec9069b1e39cda4eec8afd64ae1e43a5a1f1b883cc50ddd92d647a.exe
Resource
win10v2004-20220901-en
General
-
Target
ae37757116ec9069b1e39cda4eec8afd64ae1e43a5a1f1b883cc50ddd92d647a
-
Size
76KB
-
MD5
ff5b753806e55bc0fe98be9f72b14055
-
SHA1
a539c87130a11cc11dae89fb7da01ff3d2493177
-
SHA256
ae37757116ec9069b1e39cda4eec8afd64ae1e43a5a1f1b883cc50ddd92d647a
-
SHA512
38e95ecc74c16c0a51038df92fdddd91886a4c44fac673b21f2c5ba6dfa182a383c151ed265580c52bf7dcbd2db61142a6b33b3dc42d3fbc2674ac0657e7e997
-
SSDEEP
1536:zVCjocE9loIxVX/3CE6heDZZX0nvW012zYB6hNsSAC:RWH1Ex/yVs6ne0QXsSl
Malware Config
Signatures
Files
-
ae37757116ec9069b1e39cda4eec8afd64ae1e43a5a1f1b883cc50ddd92d647a.exe windows x86
24416fd4885a841fa08326ef5f9ec628
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetSysColorBrush
SetWindowPos
GetSubMenu
EnumWindows
PostQuitMessage
FrameRect
EnableMenuItem
GetScrollPos
GetSysColor
GetMessageA
EqualRect
UnhookWindowsHookEx
SetWindowTextA
kernel32
GetSystemTime
ExitProcess
InterlockedExchange
GetOEMCP
GetStartupInfoA
GetTempPathA
GetTimeZoneInformation
VirtualAllocEx
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTickCount
GetFileAttributesA
GetThreadLocale
RtlUnwind
FileTimeToSystemTime
gdi32
GetMapMode
CreateICW
CopyEnhMetaFileA
SelectClipPath
CreateCompatibleBitmap
FillRgn
DPtoLP
ExcludeClipRect
SetViewportExtEx
ole32
StgOpenStorage
CoInitialize
CoCreateInstance
OleRun
CoRevokeClassObject
StringFromGUID2
CoInitializeSecurity
CoTaskMemRealloc
DoDragDrop
advapi32
AdjustTokenPrivileges
CryptHashData
QueryServiceStatus
RegQueryValueExW
GetSecurityDescriptorDacl
RegCreateKeyExW
GetUserNameA
CheckTokenMembership
RegCreateKeyA
FreeSid
msvcrt
_mbscmp
signal
strcspn
_lock
_CIpow
_flsbuf
fflush
fprintf
__setusermatherr
iswspace
_strdup
strlen
raise
strncpy
__getmainargs
puts
__initenv
_fdopen
comctl32
ImageList_Write
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_DrawEx
ImageList_DragEnter
CreatePropertySheetPageA
ImageList_Destroy
ImageList_LoadImageW
ImageList_LoadImageA
InitCommonControls
ImageList_SetIconSize
shell32
DragQueryFileW
ExtractIconW
DoEnvironmentSubstW
ShellExecuteW
ExtractIconExW
ShellExecuteEx
SHGetPathFromIDList
DragAcceptFiles
DragQueryFileA
CommandLineToArgvW
SHBrowseForFolderA
oleaut32
SafeArrayGetUBound
SafeArrayPtrOfIndex
VariantCopy
SafeArrayCreate
SafeArrayPutElement
SafeArrayUnaccessData
SysReAllocStringLen
SafeArrayRedim
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ