Static task
static1
Behavioral task
behavioral1
Sample
aa259aa0192bd0022cbd4d2596ff08e7322522ffd76f3f11057cd682b6ebc5be.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa259aa0192bd0022cbd4d2596ff08e7322522ffd76f3f11057cd682b6ebc5be.exe
Resource
win10v2004-20221111-en
General
-
Target
aa259aa0192bd0022cbd4d2596ff08e7322522ffd76f3f11057cd682b6ebc5be
-
Size
263KB
-
MD5
a4b837ff20b6ed5f3e253234fe4b18a5
-
SHA1
cc800e4cf916ed7e01bf605b30a1a2f7c9be749c
-
SHA256
aa259aa0192bd0022cbd4d2596ff08e7322522ffd76f3f11057cd682b6ebc5be
-
SHA512
0ac707d32ec53e09946d9dcc976a6b38f351f5e9506385307d4038bcf94fd9202cbd401120d005236d518caedbb96bbac1658c0d512459bdc5136f8e465c563c
-
SSDEEP
6144:587S5BlQncnG9+7Tr7rglOH7AnnNkRpSbGqJ:pltnG9+TXss5RpS
Malware Config
Signatures
Files
-
aa259aa0192bd0022cbd4d2596ff08e7322522ffd76f3f11057cd682b6ebc5be.exe windows x86
5beb0cb9868c9f6a918367b175e58cf4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileW
user32
LoadCursorW
LoadCursorA
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
isdigit
time
srand
rand
advapi32
RegOpenKeyW
RegSetValueExW
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegCloseKey
Sections
.rdata10 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata9 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata44 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ