Static task
static1
Behavioral task
behavioral1
Sample
aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a.exe
Resource
win10v2004-20221111-en
General
-
Target
aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a
-
Size
817KB
-
MD5
fda22cca531a5955a7bc7302661e020a
-
SHA1
74bf8f5188f32d9663dc13c72f7a10d280317dfb
-
SHA256
aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a
-
SHA512
a0d167b0e244766dc08ab076cf88b221301c0cb61bcfaa7f11da86c1b379050179019a3644b3e00ab48e4a09e9eab74cada7153f91dece78b9cc1cd2085b6f2f
-
SSDEEP
24576:U5ZHwdBltEgsKrp58UThku0SuEU+Y/TEd:UXHw9KgssdD05rTE
Malware Config
Signatures
Files
-
aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a.exe windows x86
dce6efe089c0389991ede12a5476944b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryW
TlsSetValue
VirtualProtect
VirtualQuery
DeleteFileW
ReleaseMutex
GetCommandLineA
GetModuleHandleA
WriteConsoleW
lstrcatA
GetPrivateProfileIntA
FormatMessageA
GetCurrentThreadId
SetThreadPriority
SetLocaleInfoA
GetModuleFileNameW
GetFullPathNameW
TlsGetValue
lstrlenW
azroles
AzAddPropertyItem
AzApplicationClose
AzApplicationCreate
AzApplicationDelete
Sections
.text Size: 14KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ