Static task
static1
Behavioral task
behavioral1
Sample
aefe8b67e2bebfdf26cbace02eb17c0682c0fb43563793978f8d83b1d475cd37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aefe8b67e2bebfdf26cbace02eb17c0682c0fb43563793978f8d83b1d475cd37.exe
Resource
win10v2004-20221111-en
General
-
Target
aefe8b67e2bebfdf26cbace02eb17c0682c0fb43563793978f8d83b1d475cd37
-
Size
146KB
-
MD5
653ac6e268e0838869667f2847178c42
-
SHA1
93d541cecac8eabed3e06201fc41afd6be2569cb
-
SHA256
aefe8b67e2bebfdf26cbace02eb17c0682c0fb43563793978f8d83b1d475cd37
-
SHA512
8dd5b66740e2943418f35c9281fe3b4951efcc0bf78fdd87cd8349bd9a64a55de9fcc5e5d8b90f99e24994364b403a44a8895420bb6b740ddabf81d6b67ed277
-
SSDEEP
3072:PRMcPDaFnfQOvI+2CPeQUyhnUnY0McqPQ:PRVD44snUnY0J2
Malware Config
Signatures
Files
-
aefe8b67e2bebfdf26cbace02eb17c0682c0fb43563793978f8d83b1d475cd37.exe windows x86
5c14fd2e22c6cc821be52c4f92ae3823
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
EnumChildWindows
LoadIconA
SetPropA
UnionRect
GetUserObjectSecurity
InsertMenuA
DrawFrameControl
InvalidateRect
ChildWindowFromPoint
IntersectRect
DeleteMenu
DrawIconEx
GetWindowLongA
PostQuitMessage
GetWindowDC
SetWindowPos
GetKeyState
GetPropA
RedrawWindow
PtInRect
CreateIconIndirect
ModifyMenuA
SetTimer
CallWindowProcA
EnumWindows
LoadCursorA
ScrollWindowEx
GetMenu
ShowWindowAsync
GetDlgItem
WindowFromPoint
CreateDialogParamA
FindWindowA
BeginDeferWindowPos
SetUserObjectSecurity
GetDC
SetCursor
AppendMenuA
SetDlgItemTextA
CreateWindowExA
DrawMenuBar
ExitWindowsEx
GetWindowRect
SetClassLongA
PostMessageA
DestroyIcon
msvcrt
exit
_mbctype
_cputs
__set_app_type
_mbctombb
__getmainargs
_strdup
_strcmpi
__setusermatherr
_wfindnext64
_mbsnbcoll
_sys_errlist
putchar
_safe_fdivr
_swab
_adjust_fdiv
wcsstr
ceil
_wstati64
_lrotl
_fgetchar
_mbsrev
iswspace
_adj_fdivr_m64
_adj_fptan
_wcsnicoll
_adj_fpatan
_winver
difftime
_flushall
memcpy
_wcsnset
_controlfp
_aexit_rtn
_sys_nerr
_putenv
_set_SSE2_enable
_except_handler3
fgetwc
strspn
_itoa
__p__fmode
_setjmp3
__p__commode
cos
_rotr
_initterm
printf
wcschr
_wremove
_beep
vfwprintf
_mbccpy
putc
tanh
_wfdopen
_wspawnve
_heapmin
_exit
_acmdln
_mbsicmp
_fcvt
_cwprintf
_wsystem
_stati64
_XcptFilter
_winmajor
_heapwalk
wcstoul
_tzname
_ismbslead
srand
towupper
_mkdir
_scprintf
_wfopen
kernel32
GetComputerNameW
LocalFree
lstrlenA
FlushFileBuffers
GetDateFormatA
GetConsoleCP
FreeEnvironmentStringsA
ExitProcess
SetErrorMode
GetModuleHandleA
ReadFile
GetVersionExA
CloseHandle
RaiseException
SetUnhandledExceptionFilter
GetStartupInfoA
ResetEvent
SetThreadAffinityMask
GetLocaleInfoA
SetEnvironmentVariableA
GetCurrentThreadId
SetProcessWorkingSetSize
CreateEventA
IsBadReadPtr
CreateToolhelp32Snapshot
GetModuleFileNameA
OpenProcess
lstrcpynA
GetCommandLineA
SetEvent
GetVersion
FileTimeToLocalFileTime
CreateProcessA
MultiByteToWideChar
ReadProcessMemory
GetCPInfo
IsValidCodePage
HeapFree
ExitThread
ResumeThread
InterlockedDecrement
WriteConsoleA
CreateFileMappingA
Sleep
LocalAlloc
GetACP
WriteConsoleW
SearchPathA
Module32First
IsBadStringPtrA
EnterCriticalSection
GetStringTypeW
FormatMessageA
MapViewOfFile
HeapSize
GetSystemDirectoryA
GetConsoleMode
QueryPerformanceFrequency
GlobalUnlock
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ