Static task
static1
Behavioral task
behavioral1
Sample
aa0e127775de51512717b54f3eeb31ee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa0e127775de51512717b54f3eeb31ee.exe
Resource
win10v2004-20240226-en
General
-
Target
aa0e127775de51512717b54f3eeb31ee
-
Size
178KB
-
MD5
aa0e127775de51512717b54f3eeb31ee
-
SHA1
daf3073224811e8c96e6289daa1443d60450f972
-
SHA256
8ebf6a088fdc7432ff6af7229afe6d4d3370e2e47825433500b4e3ef122cb0e7
-
SHA512
6c194949ad1c7cd464313309cfc43ad3d1a955b705b04894e0876d39d385872999f5f2e94ea9c696455152009c609c0194904ac9e227457f7fac7f8ea68c5129
-
SSDEEP
3072:cWPG7i77e4emLLltkXmM4pxbCcM+84p8v2K/46peDTQna:z+7iPLysbdM+P8+50
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0e127775de51512717b54f3eeb31ee
Files
-
aa0e127775de51512717b54f3eeb31ee.exe windows:4 windows x86 arch:x86
7846791009d15bc0593194efc9e35c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleUninitialize
CoCreateInstance
CoFreeUnusedLibraries
OleInitialize
StringFromGUID2
CoUninitialize
CoInitialize
avifil32
AVISaveOptions
AVIMakeCompressedStream
kernel32
WideCharToMultiByte
FileTimeToSystemTime
GetModuleHandleW
FreeLibrary
ReplaceFileW
FindNextChangeNotification
GetCurrentProcessId
InitializeCriticalSection
ResetEvent
GlobalAlloc
GlobalUnlock
EnterCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetProcessId
InterlockedExchange
lstrcpynW
Sleep
FindCloseChangeNotification
InterlockedDecrement
MulDiv
GetThreadLocale
WaitForSingleObject
GetSystemTimeAsFileTime
CreateThread
FindClose
GetLocaleInfoA
GetModuleFileNameA
FindFirstFileW
InterlockedIncrement
GetDriveTypeW
EnumResourceTypesA
GetProcAddress
DisableThreadLibraryCalls
SetEvent
FileTimeToLocalFileTime
CreateEventW
GlobalReAlloc
ExitProcess
MultiByteToWideChar
CloseHandle
GlobalLock
lstrlenA
GetACP
DeleteCriticalSection
GetLastError
GetFullPathNameW
lstrlenW
GetTickCount
LeaveCriticalSection
GetVersionExW
FindFirstChangeNotificationW
GetVersionExA
advapi32
RegOpenKeyExW
RegSetValueW
RegSetValueExW
RegCloseKey
RegCreateKeyW
RegEnumKeyExW
RegDeleteKeyW
user32
GetDC
PostMessageW
LoadCursorW
UnionRect
GetSystemMetrics
ScreenToClient
DestroyMenu
FrameRect
IsRectEmpty
SetCursor
DrawTextW
ReleaseDC
SetFocus
SetWindowLongW
GetActiveWindow
GetCursorPos
SetForegroundWindow
BringWindowToTop
TrackPopupMenuEx
CopyRect
SetTimer
SendMessageW
CreatePopupMenu
ClientToScreen
GetClientRect
DefWindowProcW
UpdateWindow
IsWindow
LoadImageW
IsWindowVisible
wsprintfW
EqualRect
FindWindowExW
GetSysColor
IntersectRect
GetWindowLongW
SetRectEmpty
PtInRect
InflateRect
OffsetRect
SetCapture
ReleaseCapture
KillTimer
GetDesktopWindow
FillRect
ShowScrollBar
EnableWindow
GetWindowRect
SetRect
GetSysColorBrush
GetParent
DrawFocusRect
InvalidateRect
shell32
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetMalloc
DragQueryFileW
SHGetPathFromIDListW
SHGetFileInfoW
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ