Static task
static1
Behavioral task
behavioral1
Sample
aaf3ab5112bba1b2c988c798a9f9a530d3255ab23d0c5081862161dc46804a36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaf3ab5112bba1b2c988c798a9f9a530d3255ab23d0c5081862161dc46804a36.exe
Resource
win10v2004-20220812-en
General
-
Target
aaf3ab5112bba1b2c988c798a9f9a530d3255ab23d0c5081862161dc46804a36
-
Size
51KB
-
MD5
90e94a67f12dfe9af8e492c240ca2d5d
-
SHA1
79f223e69b36a68d92b44df483d8c1ba74b99c77
-
SHA256
aaf3ab5112bba1b2c988c798a9f9a530d3255ab23d0c5081862161dc46804a36
-
SHA512
075b159f417ff0e97c4137f30d2532c7b3a5351ada31befec9b9996fe1b1f4daddcf25be7aff269d1f9af8b3ba4eb2ed16d046a01a0b3f6173a49379b42abd2f
-
SSDEEP
1536:12cvi27wPYFeI3FmT/yT9hvZB0CEPwWkTd:QcogFeIY/yTThB094W
Malware Config
Signatures
Files
-
aaf3ab5112bba1b2c988c798a9f9a530d3255ab23d0c5081862161dc46804a36.exe windows x86
acb329246d9827cd008494718ad202df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
ShellExecuteA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE