Static task
static1
Behavioral task
behavioral1
Sample
2ab520e1764c58dfae38ad3b98e1dd6bda73ccfe8a763c917656ae0795992a3b.exe
Resource
win7-20220414-en
General
-
Target
2ab520e1764c58dfae38ad3b98e1dd6bda73ccfe8a763c917656ae0795992a3b
-
Size
285KB
-
MD5
00bd9f5116bae2a535f503cd19845478
-
SHA1
8d8695ea955b44e8b46d310630fcaf12ab3f79fc
-
SHA256
2ab520e1764c58dfae38ad3b98e1dd6bda73ccfe8a763c917656ae0795992a3b
-
SHA512
8f38e6f01a00f417f8e13ddd667fa64d105ef86cb7e3716e44a776ddb3e6a6c4d39d5aac404c26441777423c5d41474fdf33c705561251f26e6cecbc9c80d69a
-
SSDEEP
6144:b2t1oTM4k2EIU6kGQC0ujJXfduLBLSn9RkV:b2t1oTvC5ibDjJXQ89Rg
Malware Config
Signatures
Files
-
2ab520e1764c58dfae38ad3b98e1dd6bda73ccfe8a763c917656ae0795992a3b.exe windows x86
ad4d93ca1503f163d7ed402dd7e6354c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyAcceleratorTable
GetCaretBlinkTime
GetParent
LoadStringA
DrawTextExW
LoadKeyboardLayoutW
shlwapi
GetMenuPosFromID
advapi32
RevertToSelf
RegDisablePredefinedCacheEx
GetWindowsAccountDomainSid
wininet
DeleteUrlCacheEntryW
mscms
GetColorDirectoryW
gdi32
GetTextExtentPoint32W
GetSystemPaletteEntries
ExtCreatePen
GdiComment
GdiSetBatchLimit
CreateSolidBrush
lz32
LZInit
LZClose
LZSeek
winmm
mixerGetControlDetailsW
kernel32
WritePrivateProfileStringW
GetTempFileNameW
GlobalFree
EnumSystemLocalesA
ExitProcess
GetBinaryTypeW
GetUserDefaultLangID
GetLogicalDrives
GetModuleHandleA
VerifyScripts
UnhandledExceptionFilter
EnumTimeFormatsA
GetProcessTimes
FindNextVolumeMountPointW
LoadLibraryW
GlobalHandle
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ