Static task
static1
Behavioral task
behavioral1
Sample
aaaa86ced356ff087a48a17b8dadfd2f25ccdd40c0718495c942c60e4b979d6d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aaaa86ced356ff087a48a17b8dadfd2f25ccdd40c0718495c942c60e4b979d6d.exe
Resource
win10v2004-20220812-en
General
-
Target
aaaa86ced356ff087a48a17b8dadfd2f25ccdd40c0718495c942c60e4b979d6d
-
Size
141KB
-
MD5
4dc4a9af1c9e0b3f7e1130b7692d5d9e
-
SHA1
b3609b0d634a9c5035376ee8046b7f199c19c4f8
-
SHA256
aaaa86ced356ff087a48a17b8dadfd2f25ccdd40c0718495c942c60e4b979d6d
-
SHA512
fce378cf411f519644df7a881474eed151f0ccb992624dc2fbf9e141548e704f7d4210771edf776a03d23a3df54a15a8543d6a0cf0bc8f83ee7cd59228cea476
-
SSDEEP
3072:I2BURB5wIgh14X3hbsD0iMIFb9HioxCRW0ueB48k4W1UKp:f4B5hgh1ehbsNvHiXrzW1U
Malware Config
Signatures
Files
-
aaaa86ced356ff087a48a17b8dadfd2f25ccdd40c0718495c942c60e4b979d6d.exe windows x86
6656498bedcf8fe4415212740ff6b4e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_isatty
_finite
calloc
_CIsqrt
__dllonexit
_rotr
_controlfp
wcsncmp
_rotl
__badioinfo
_tell
_purecall
__p__iob
_commit
_initterm
strtoul
wcstombs
_strnicmp
rand
_acmdln
strstr
srand
_snwprintf
wcscpy
malloc
__set_app_type
_wtoi
wcsspn
_ultoa
__getmainargs
strrchr
__p__osver
iswalpha
memset
wcstol
wcscspn
_ftol
_cexit
_CxxThrowException
kernel32
GetCurrentThreadId
GetExitCodeThread
OpenEventA
GetModuleHandleA
FileTimeToLocalFileTime
OpenMutexW
FindResourceA
GetSystemInfo
GetOEMCP
TerminateProcess
GetCommandLineW
GetTickCount
GetModuleHandleW
GetVersion
GetProcessHeap
ResumeThread
ExitProcess
GetStdHandle
ExpandEnvironmentStringsW
GetFileSize
GetFileAttributesW
OpenEventW
GetLastError
GetThreadLocale
SetHandleCount
VirtualAlloc
GetConsoleMode
SetLastError
user32
FindWindowW
IsWindowVisible
DestroyWindow
DialogBoxParamW
LoadImageW
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 441B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ