Static task
static1
Behavioral task
behavioral1
Sample
aa2c06956d96869e2294ee3e65b0564e14bd7f7e2d2518e8af12ec214d6711f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa2c06956d96869e2294ee3e65b0564e14bd7f7e2d2518e8af12ec214d6711f7.exe
Resource
win10v2004-20221111-en
General
-
Target
aa2c06956d96869e2294ee3e65b0564e14bd7f7e2d2518e8af12ec214d6711f7
-
Size
700KB
-
MD5
097f7947c688cda1aa46c8a5b91c6b10
-
SHA1
3b74c10747c8a05bed616b54d9d6b18f0ad58d75
-
SHA256
aa2c06956d96869e2294ee3e65b0564e14bd7f7e2d2518e8af12ec214d6711f7
-
SHA512
a853615477a046cf1f03867b104fcab2b729b9eec2300f077bf463e8b4ea489e87efa914e68e08e52ac0a79243444fbaee670000090f984a1a0b3b0e5d60e7ca
-
SSDEEP
12288:rH+rIuMqpMXYmi90KwwVq4exFte0O0RWyRi7JjaOCPcb0Fx/AJGu:ioqpMIx5A9xFte0O0oy0vYFx/
Malware Config
Signatures
Files
-
aa2c06956d96869e2294ee3e65b0564e14bd7f7e2d2518e8af12ec214d6711f7.exe windows x86
588707351df8081183c55852cc267424
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
LoadTypeLi
comctl32
ImageList_LoadImageA
ImageList_Create
ord17
InitCommonControlsEx
ImageList_GetIconSize
kernel32
GetFileType
ExitProcess
FlushFileBuffers
HeapFree
LoadLibraryA
RtlUnwind
VirtualQuery
GetCurrentProcessId
SetLastError
GetModuleHandleW
VirtualFree
LCMapStringW
InterlockedDecrement
GetLocalTime
InterlockedIncrement
GetCommandLineW
GetSystemTime
GetSystemTimeAsFileTime
HeapDestroy
TlsAlloc
GetLastError
InterlockedExchange
GetCurrentProcess
GetTickCount
GetTimeZoneInformation
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentStringsW
GetModuleFileNameW
GetProcAddress
CompareStringA
GetCurrentThread
SetHandleCount
GetModuleHandleA
EnterCriticalSection
UnhandledExceptionFilter
HeapAlloc
CreateMutexW
GetModuleFileNameA
TerminateProcess
MultiByteToWideChar
HeapCreate
ReadFile
GetStartupInfoW
GetStringTypeW
GetVersion
GetStringTypeA
CloseHandle
GetCommandLineA
SetFilePointer
WideCharToMultiByte
SetStdHandle
VirtualAlloc
TlsSetValue
GetStdHandle
HeapReAlloc
SetEnvironmentVariableA
DeleteCriticalSection
FatalAppExitA
GetCurrentThreadId
GetEnvironmentStrings
TlsFree
IsBadWritePtr
QueryPerformanceCounter
GetStartupInfoA
CompareStringW
LCMapStringA
GetCPInfo
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WriteFile
gdi32
CreateCompatibleBitmap
SetBkColor
Polyline
GdiFlush
SelectObject
CreateBitmap
ExcludeClipRect
SetAbortProc
CreatePatternBrush
ExtFloodFill
CreateCompatibleDC
GetViewportExtEx
CreateDCW
EqualRgn
SelectPalette
CreateFontIndirectW
SetMapMode
Ellipse
DeleteObject
AbortDoc
StretchDIBits
Rectangle
StartPage
ScaleViewportExtEx
RestoreDC
MoveToEx
Polygon
GetStockObject
DeleteDC
RectInRegion
PatBlt
CombineRgn
GetRgnBox
CreatePen
OffsetRgn
SetTextColor
ExtTextOutW
ScaleWindowExtEx
ExtCreatePen
SetBkMode
SaveDC
CreateRectRgn
StrokePath
SelectClipRgn
SetStretchBltMode
CreatePolygonRgn
TextOutW
GetDIBits
SetWindowExtEx
GetDeviceCaps
SetViewportOrgEx
SetPixel
SetViewportExtEx
Arc
LineTo
GetTextColor
PtInRegion
IntersectClipRect
BitBlt
GetPaletteEntries
GetPixel
EnumFontFamiliesExW
SetWindowOrgEx
CreateDIBSection
SetPolyFillMode
StretchBlt
GetTextMetricsA
CreatePalette
PolyBezier
EndDoc
CreateRectRgnIndirect
GetTextMetricsW
SetROP2
EndPage
CreateSolidBrush
PtVisible
DPtoLP
GetTextExtentPoint32W
CreateEllipticRgn
GetObjectW
SetTextAlign
user32
GetParent
ShowWindow
GetClassLongW
CreateWindowExW
DestroyWindow
GetDC
GetWindowTextW
DefWindowProcW
GetAsyncKeyState
RegisterClassExW
MessageBoxW
TranslateMessage
RegisterClassW
LoadBitmapW
advapi32
LookupAccountSidA
RegOpenKeyA
CloseServiceHandle
RegCloseKey
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
RegCreateKeyExA
EqualSid
OpenProcessToken
DeleteService
RegSetValueExA
GetTokenInformation
RegOpenKeyExA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ