Static task
static1
Behavioral task
behavioral1
Sample
ae647abf9875421b0321ad200c64e604235159849dc12ec5d0fc6ad03a67a09d.exe
Resource
win7-20220812-en
General
-
Target
ae647abf9875421b0321ad200c64e604235159849dc12ec5d0fc6ad03a67a09d
-
Size
177KB
-
MD5
d9a66fd8f7eb511686497eea9ac715e8
-
SHA1
c091db261ca6a208481df59e18b0c65729f7ac68
-
SHA256
ae647abf9875421b0321ad200c64e604235159849dc12ec5d0fc6ad03a67a09d
-
SHA512
359909079f250fbcc9f935f15f334def09486d26bd5e523978872dd27ca469beb0e6117edf5283dcc0d75144a247134f9ebb60f44203b666238eb431708256c2
-
SSDEEP
3072:ehENwJodX5542fFlJGRkypp6bnTHu6sAeaCnuMlkyY7OY7XVGZPbxkjo+lA6HF4:ModX55xtlJ8L491yU41yjR
Malware Config
Signatures
Files
-
ae647abf9875421b0321ad200c64e604235159849dc12ec5d0fc6ad03a67a09d.exe windows x86
f364f83580e4645c268099cefa44bfd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CloseHandle
InitializeCriticalSection
GetModuleHandleA
EnterCriticalSection
SetUnhandledExceptionFilter
GetOEMCP
lstrcatA
GetProcAddress
ReadFile
GetStringTypeW
GetStringTypeA
IsBadCodePtr
lstrcpynA
IsBadReadPtr
MultiByteToWideChar
LCMapStringW
SetStdHandle
GetCPInfo
GetThreadLocale
WideCharToMultiByte
GetEnvironmentStrings
LCMapStringA
FreeEnvironmentStringsW
FreeLibrary
LoadLibraryA
GetCurrentThreadId
FindFirstFileA
EnumResourceNamesW
GetFullPathNameA
lstrcmpiA
GetFileAttributesA
GetTickCount
LeaveCriticalSection
WriteFile
GetDiskFreeSpaceA
lstrlenA
lstrlenA
lstrcmpA
VirtualProtect
GetEnvironmentStringsW
Sleep
FreeEnvironmentStringsA
lstrcpyA
SetFilePointer
UnhandledExceptionFilter
FlushFileBuffers
GetStartupInfoA
DeleteCriticalSection
MulDiv
GetLastError
CreateFileA
RaiseException
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 86KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ