Static task
static1
Behavioral task
behavioral1
Sample
aad01d8093c6de1b9b23e76e8b584354e0b3d3fca37f3a465419b07127c77208.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aad01d8093c6de1b9b23e76e8b584354e0b3d3fca37f3a465419b07127c77208.exe
Resource
win10v2004-20220812-en
General
-
Target
aad01d8093c6de1b9b23e76e8b584354e0b3d3fca37f3a465419b07127c77208
-
Size
385KB
-
MD5
5055a50df7c326bc75f5fca5f0a3b738
-
SHA1
e84a91f9f43061347ec3e247180ef166aa8f0692
-
SHA256
aad01d8093c6de1b9b23e76e8b584354e0b3d3fca37f3a465419b07127c77208
-
SHA512
5bd525a0a9e79150244f5a28b79b65a084ab28f8953ed7ec355db81753aa62c6af1e0d870e113cc0c22982be96bd1e4eccb247b9e963553e74399a856fef3d1e
-
SSDEEP
6144:VLgPmjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:CqXSVKkY4UmR4rPx9kWKUZ+BXyZ/1p
Malware Config
Signatures
Files
-
aad01d8093c6de1b9b23e76e8b584354e0b3d3fca37f3a465419b07127c77208.exe windows x86
8dbc0bc6210fa04d2438c75a5e6e77a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CreateMutexA
FindVolumeClose
ResumeThread
InterlockedExchange
GetCommandLineA
VirtualAlloc
CloseHandle
GetModuleHandleW
WriteFile
GetPrivateProfileIntW
GetEnvironmentVariableA
CreateEventA
LocalFree
lstrlenA
GetDriveTypeW
GlobalFree
GlobalSize
GetACP
GetExitCodeProcess
user32
GetClientRect
IsWindow
CallWindowProcW
GetCursorInfo
DispatchMessageA
SetFocus
EndDialog
GetSysColor
GetClassInfoA
GetSysColor
GetKeyboardType
CreateWindowExA
DrawStateW
avicap32
videoThunk32
AppCleanup
videoThunk32
videoThunk32
videoThunk32
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ