Static task
static1
Behavioral task
behavioral1
Sample
ayru.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ayru.exe
Resource
win10v2004-20221111-en
General
-
Target
ap-file-ayru.exe--1730610701.zip
-
Size
156KB
-
MD5
eb14d6ff63229ec7e9e8549dcdcbdee6
-
SHA1
70a1252d95bba70feb5997ba5c9c5b3a1cbc5c47
-
SHA256
48ebe9c96482cad309cd4190177496b439f63f6c4a7f665143160d7fe800770e
-
SHA512
1df1676948418a70e88406df7686ba700c8271f66457987dac25cdae1f7c169abce4aebf1488db7f47cf51709865654886f6f419db59f6925c50ebb241a41a65
-
SSDEEP
3072:7kmEKCI9G+3rJoe5hft+9jfMsRFXqhhEjw7Fy9SKxRegJ1quT0:7kPKTpEjfMsfG+jw7U7xRvDT0
Malware Config
Signatures
Files
-
ap-file-ayru.exe--1730610701.zip.zip
Password: cautionhandlewithcare
-
ayru.exe.exe windows x86
Password: cautionhandlewithcare
d5b227c515398109a45a67c66b54ce02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetSystemTime
Sleep
CreateMutexA
GetLastError
CloseHandle
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
SystemTimeToFileTime
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleCP
FlushFileBuffers
ReadFile
SetHandleInformation
WaitForSingleObject
CreateEventA
GetTickCount
FindNextFileA
GetFileTime
ReleaseMutex
GetModuleFileNameA
FileTimeToSystemTime
GetTempPathA
OutputDebugStringA
DuplicateHandle
RaiseException
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
ExitProcess
GetCurrentThread
GetCurrentThreadId
ResumeThread
GetThreadContext
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetStdHandle
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
SetFileTime
WriteFile
CreateThread
GetSystemTimeAsFileTime
MoveFileA
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
TerminateProcess
RtlUnwind
VirtualQuery
LoadLibraryExW
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
GetFileType
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
MoveFileExW
GetFileAttributesExW
GetConsoleMode
ReadConsoleW
GetCurrentDirectoryA
user32
MessageBoxA
GetSystemMetrics
ws2_32
WSACleanup
WSAStartup
gethostbyname
socket
shutdown
setsockopt
sendto
WSAGetLastError
select
recvfrom
recv
listen
WSACloseEvent
WSACreateEvent
inet_addr
htons
ioctlsocket
connect
closesocket
bind
WSAEventSelect
WSAWaitForMultipleEvents
send
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ayru.exe.METADATA