Static task
static1
Behavioral task
behavioral1
Sample
a647a1fcaa27aa99020bfa0c9ba3191d9e24c3fa9b84eb9c1ce54e3be17fad92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a647a1fcaa27aa99020bfa0c9ba3191d9e24c3fa9b84eb9c1ce54e3be17fad92.exe
Resource
win10v2004-20221111-en
General
-
Target
a647a1fcaa27aa99020bfa0c9ba3191d9e24c3fa9b84eb9c1ce54e3be17fad92
-
Size
169KB
-
MD5
93a1ec433077260cb771cfdcdbb0ebb2
-
SHA1
ae8c5bd8a1762186f78a2c7872e39209b6efab58
-
SHA256
a647a1fcaa27aa99020bfa0c9ba3191d9e24c3fa9b84eb9c1ce54e3be17fad92
-
SHA512
d67691b88d6d2ee2e0bb32ae410610aeabb48de521f2caf5b14c2fd446845383dbd546f5c32c0b8555653e21db1143c2215e624b847860a63ad8dbaf7b3167e6
-
SSDEEP
3072:fGO3aam2LDE2Ng88YpmuDVmkbL4EzHd7bwjrS2:fH3CSE25b/MGHd7bG
Malware Config
Signatures
Files
-
a647a1fcaa27aa99020bfa0c9ba3191d9e24c3fa9b84eb9c1ce54e3be17fad92.exe windows x86
f23b2ec0bcc051d381ef8d1f158401dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
TranslateMessage
GetDC
CharNextA
GetParent
GetDesktopWindow
kernel32
GetModuleHandleW
GetWindowsDirectoryA
SetCurrentDirectoryA
IsDebuggerPresent
GetVersion
lstrlenA
lstrlenW
GlobalFindAtomA
GetStartupInfoA
GetCommandLineW
GetUserDefaultLangID
GetThreadLocale
GetProcessHeap
CopyFileA
GetTickCount
GetCurrentProcessId
GetCurrentThread
GetOEMCP
MulDiv
QueryPerformanceCounter
GlobalFindAtomW
GetCommandLineA
GetDriveTypeA
GetModuleHandleA
lstrcmpiW
GetACP
VirtualAlloc
RemoveDirectoryA
VirtualFree
lstrcmpiA
GetCurrentThreadId
DeleteFileA
lstrcmpA
GetConsoleOutputCP
GetCurrentProcess
gdi32
CreateFontIndirectA
SetMapMode
GetDeviceCaps
SelectObject
GetObjectA
CreatePen
SaveDC
DeleteDC
CreateCompatibleDC
GetStockObject
RestoreDC
LineTo
CreateSolidBrush
SetTextColor
GetClipBox
RectVisible
SetTextAlign
DeleteObject
SelectPalette
GetTextMetricsA
CreatePalette
SetStretchBltMode
GetPixel
PatBlt
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Ssuxaocp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Aani Ara Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ