Static task
static1
Behavioral task
behavioral1
Sample
aacc16c3c1ed220d87b4e1401895c2770569aa5fd3eea1c23d8c37177c8309b6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aacc16c3c1ed220d87b4e1401895c2770569aa5fd3eea1c23d8c37177c8309b6.exe
Resource
win10v2004-20220812-en
General
-
Target
aacc16c3c1ed220d87b4e1401895c2770569aa5fd3eea1c23d8c37177c8309b6
-
Size
3.1MB
-
MD5
7a44fb65732077f2a363ef356fdccbbd
-
SHA1
560b96a6ad84c29f4b575ba14331b571ae832467
-
SHA256
aacc16c3c1ed220d87b4e1401895c2770569aa5fd3eea1c23d8c37177c8309b6
-
SHA512
1ebb0d2922e9e0046f8132aa703e244a9a6dd6f09d517cbf2df5e09d3e6f802c6b9a0ef64b13f5d0de7584411cca611b1ae0c6ecf39173c22342daa2b5c9c7af
-
SSDEEP
49152:sIxvc166FRR34qjRy9UAKjV3435ZM1naqzOEQDmMsmKdDjLVVjtJcsNhnu7LiJOk:kdN7ZH/MZjJS
Malware Config
Signatures
Files
-
aacc16c3c1ed220d87b4e1401895c2770569aa5fd3eea1c23d8c37177c8309b6.exe windows x86
7851610420a1a66b914f233061843845
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardLayout
shell32
SHGetSpecialFolderPathA
ShellExecuteA
shlwapi
StrStrA
StrChrIA
kernel32
GetModuleHandleA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
LoadResource
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
urlmon
IsValidURL
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE