Static task
static1
Behavioral task
behavioral1
Sample
aa567e079b3824acbd5c900a04518e1c5dc9119a0ccd929c772263e9e38f027d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa567e079b3824acbd5c900a04518e1c5dc9119a0ccd929c772263e9e38f027d.exe
Resource
win10v2004-20220901-en
General
-
Target
aa567e079b3824acbd5c900a04518e1c5dc9119a0ccd929c772263e9e38f027d
-
Size
527KB
-
MD5
350f49623285a3cff9ae707f807a921d
-
SHA1
33e226aa34130f3ccafae55d890c9c826ce474ce
-
SHA256
aa567e079b3824acbd5c900a04518e1c5dc9119a0ccd929c772263e9e38f027d
-
SHA512
e66869accb093294ca8d871f398392c76180aded30df5e2dc573575086d9286b9f62977d89eb603c367928ca8f38196ce81a12cbf3102f1d3023f06326fdb718
-
SSDEEP
12288:bNxDthyxjaWvJ+E8Obt9fnbMuJ/VQ32R47jrMEFg:bX/yxjvhkU/VxE
Malware Config
Signatures
Files
-
aa567e079b3824acbd5c900a04518e1c5dc9119a0ccd929c772263e9e38f027d.exe windows x86
22f1e89d03d78540787a5eabd80a24d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetAclInformation
GetManagedApplications
LogonUserW
RegDeleteKeyA
AbortSystemShutdownA
user32
RegisterHotKey
RegisterClipboardFormatW
OpenDesktopA
OemToCharW
MapVirtualKeyW
IsDialogMessageA
GetProcessWindowStation
GetMonitorInfoW
GetMessageTime
GetMessageExtraInfo
GetClipboardSequenceNumber
FindWindowW
EnumDisplayDevicesA
CharNextW
CharNextA
SetClipboardData
setupapi
SetupLogErrorA
SetupDiGetHwProfileFriendlyNameExA
SetupDiInstallDriverFiles
kernel32
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
VirtualFree
VirtualAlloc
ReadFile
LoadLibraryA
HeapCreate
GlobalMemoryStatus
ExitProcess
msvcrt
exit
_cexit
__p__commode
Sections
.text Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rata Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE