Static task
static1
Behavioral task
behavioral1
Sample
aec200c4920b908a92aff6a88996a2fd59e04ec4c8a5c8541aefa4aa07ba624e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aec200c4920b908a92aff6a88996a2fd59e04ec4c8a5c8541aefa4aa07ba624e.exe
Resource
win10v2004-20221111-en
General
-
Target
aec200c4920b908a92aff6a88996a2fd59e04ec4c8a5c8541aefa4aa07ba624e
-
Size
350KB
-
MD5
6c334aeb77cf787a89c4bbc9492b3c9f
-
SHA1
eac084eb78986a63aeec31e6701487c18449e968
-
SHA256
aec200c4920b908a92aff6a88996a2fd59e04ec4c8a5c8541aefa4aa07ba624e
-
SHA512
a03a6214a54a53343fad6216ce855d85f6c3878ec91ffa6b33192071e263d8f1a3c2295829f03e1606d682e08395d8763df814f2870a298df2b20733112c8d30
-
SSDEEP
6144:4LE9WIPMyKKtbiYwlymbUI2Bf6NPgZ3Rr5vDMTfY4J2/R44F:TUyvt+YwlT4I2ZKPgVRdMTfHz
Malware Config
Signatures
Files
-
aec200c4920b908a92aff6a88996a2fd59e04ec4c8a5c8541aefa4aa07ba624e.exe windows x86
752c5a10aceabc50e3a3ee27894f9d27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetModuleHandleW
ExitProcess
GetCurrentDirectoryA
VirtualAlloc
IsDebuggerPresent
GetCommandLineA
setupapi
SetupGetLineByIndexW
SetupGetLineTextW
CM_Reenumerate_DevNode_Ex
SetupCloseLog
SetupDiInstallDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailA
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupGetMultiSzFieldW
SetupDiGetDeviceInstallParamsW
pSetupStringFromGuid
SetupDiOpenClassRegKeyExW
SetupGetTargetPathW
SetupDiBuildDriverInfoList
SetupDiGetDeviceInterfaceAlias
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
gdi32
GetGlyphOutlineW
StretchDIBits
GetTextExtentPoint32W
ExcludeClipRect
GetEnhMetaFileHeader
GetWindowOrgEx
ArcTo
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 18KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 122KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 148KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ