Static task
static1
Behavioral task
behavioral1
Sample
aaee706a6af1325a805c73e24363e8b57e3662e368010f05d349292955330c63.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aaee706a6af1325a805c73e24363e8b57e3662e368010f05d349292955330c63.exe
Resource
win10v2004-20221111-en
General
-
Target
aaee706a6af1325a805c73e24363e8b57e3662e368010f05d349292955330c63
-
Size
115KB
-
MD5
14011f6f51c972714bd0cbb125d7c76f
-
SHA1
3b061a30c5894856dabaf211ca24188dd17af4b1
-
SHA256
aaee706a6af1325a805c73e24363e8b57e3662e368010f05d349292955330c63
-
SHA512
793fbe1cb45c30f8de512a2f61790bf35753ee3516ba0d4e1275394bf1dadfdeffe13ef9b99db634c37dafe801f29a4987d5cf4c9ee82b7c59baa2b047fc35a3
-
SSDEEP
3072:yCn7qkznO7oUIgelPxvCinWSDrX72mSt8MwbTKRzzbE4:yCFz8o1g0vCinWSDL72mlMkTKq4
Malware Config
Signatures
Files
-
aaee706a6af1325a805c73e24363e8b57e3662e368010f05d349292955330c63.exe windows x86
d24485a5cf5fc14745083e7351059473
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
DeleteFileA
Sleep
ExitProcess
user32
GetDesktopWindow
Sections
.text Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Uwlxcokk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Drwl, Yb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Uvxfgxhk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 235B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE