Static task
static1
Behavioral task
behavioral1
Sample
Activator.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Activator.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
downloader.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
downloader.exe
Resource
win10v2004-20220901-en
General
-
Target
2a626297afbfaaab06caf19a8df29dc40083885c20fd0868bd491e23cb15b6c5
-
Size
328KB
-
MD5
d984da1f18930d245c16ed103947427a
-
SHA1
32f73d31260273c366857b47b36a198c58627dbb
-
SHA256
2a626297afbfaaab06caf19a8df29dc40083885c20fd0868bd491e23cb15b6c5
-
SHA512
c2b8257f50b35e8b0449da73620165227a0ed7def8e62167e8f18607902be292a985db590b7aad825b83c28bdcb510c594815b42505f1e64b6a89bcab24363ab
-
SSDEEP
6144:+l2SZvBh92HPYUlDdGaN3j+hNil0PtCU8L/LFfPmSazkEVhwZahP2:UJD9QdPp3DzxDRfPm/huag
Malware Config
Signatures
Files
-
2a626297afbfaaab06caf19a8df29dc40083885c20fd0868bd491e23cb15b6c5.cab
-
Activator.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 318KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
downloader.exe.exe windows x86
c1862dbc18e001014cb75fba9940ec8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
strncpy
malloc
fclose
fwrite
fopen
_exit
_XcptFilter
exit
__p___initenv
rand
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
__getmainargs
_snprintf
kernel32
Sleep
GetTickCount
shlwapi
StrToIntExA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE