Static task
static1
Behavioral task
behavioral1
Sample
aa0d9bc183d4f0239bf67c760790b9829a690ecd5515f895459833e0d922d937.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa0d9bc183d4f0239bf67c760790b9829a690ecd5515f895459833e0d922d937.exe
Resource
win10v2004-20221111-en
General
-
Target
aa0d9bc183d4f0239bf67c760790b9829a690ecd5515f895459833e0d922d937
-
Size
789KB
-
MD5
94c853edad5e6555f5ddd88e0243312b
-
SHA1
6bbe26ae98a7c4df336262e39deb1db4949ebbb4
-
SHA256
aa0d9bc183d4f0239bf67c760790b9829a690ecd5515f895459833e0d922d937
-
SHA512
b6fb360acf6ab12ad1273e03cbf59d891a8cb42ff9df0cb2dfec9b9220e288258aed8fc4409d2b0fed40bfb7b63dbff780e2067db2bc6c919a51fc83eb574e8b
-
SSDEEP
24576:IkWa+Wdd3kp8BUp7cJkvd8WRcpD1Owszv:I2HnZUeJkvOAQMx
Malware Config
Signatures
Files
-
aa0d9bc183d4f0239bf67c760790b9829a690ecd5515f895459833e0d922d937.exe windows x86
277b6395eb077fef7f086f67c9f0c6fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
CreatePipe
CreateSemaphoreA
DeleteAtom
RemoveDirectoryA
AddAtomA
GetCurrentThreadId
HeapCreate
RemoveDirectoryA
WriteFile
WaitForMultipleObjects
GetModuleHandleA
GetFileType
GetCommandLineA
FindAtomA
HeapFree
CreateDirectoryA
FatalExit
CloseHandle
SetVolumeLabelA
SetEndOfFile
IsBadWritePtr
ClearCommBreak
FindClose
GetModuleFileNameA
cryptui
DllRegisterServer
CryptUIWizExport
WizardFree
CryptUIDlgFreeCAContext
LocalEnroll
DllUnregisterServer
CryptUIDlgViewContext
WizardFree
CryptUIWizImport
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIWizDigitalSign
mgmtapi
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
SnmpMgrCtl
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 767KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjbagpz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE