Static task
static1
Behavioral task
behavioral1
Sample
ab5770c3f487a24ec30ec84ed39c4656ff6d5f6f190350002fac8adac90a553d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab5770c3f487a24ec30ec84ed39c4656ff6d5f6f190350002fac8adac90a553d.exe
Resource
win10v2004-20220901-en
General
-
Target
ab5770c3f487a24ec30ec84ed39c4656ff6d5f6f190350002fac8adac90a553d
-
Size
802KB
-
MD5
5fb4a817b76e195462a5255fb163c300
-
SHA1
283bd8a2a333ec7f1fb9e700f0686dbf816e63b1
-
SHA256
ab5770c3f487a24ec30ec84ed39c4656ff6d5f6f190350002fac8adac90a553d
-
SHA512
6a74b36b71bc288805750b0fe7481c5700664f662fdd758376245a7b8e22a01e881c58d95d76949a422f99f83c509f72488636f990e02e15ea2e64de0090ab75
-
SSDEEP
12288:pkeC0deozy0ICZXGKk+0GRYmCUAIaxbkvE3iKPrtB0W2ponFIkRno3XxQc3:puF2ICZXGKP00dLAzztBMynFhRn0Xyc3
Malware Config
Signatures
Files
-
ab5770c3f487a24ec30ec84ed39c4656ff6d5f6f190350002fac8adac90a553d.exe windows x86
306bdf5c6fa16e8700fb6cabec92ac62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
lstrcpyA
HeapCreate
CloseHandle
lstrlenA
LoadLibraryW
GetModuleHandleA
GlobalUnlock
LocalFree
GetSystemTime
Sleep
CreateFileW
GetComputerNameA
GetCurrentDirectoryA
GetCommandLineA
UnmapViewOfFile
ResetEvent
CreateThread
PulseEvent
FindClose
user32
SetFocus
DispatchMessageA
GetDlgItem
GetDC
DrawEdge
CreateWindowExA
IsWindow
DrawMenuBar
GetCaretPos
CheckRadioButton
FillRect
CallWindowProcA
CreateIcon
cryptui
WizardFree
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
LocalEnroll
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 793KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE