Static task
static1
Behavioral task
behavioral1
Sample
0abc0a8473333d038c79dc23507edbec8b5c7e7ac2664ecf36c6bbc005c40f27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0abc0a8473333d038c79dc23507edbec8b5c7e7ac2664ecf36c6bbc005c40f27.exe
Resource
win10v2004-20220901-en
General
-
Target
0abc0a8473333d038c79dc23507edbec8b5c7e7ac2664ecf36c6bbc005c40f27
-
Size
796KB
-
MD5
7c2499346da2f0fd59b197b22bbc79d0
-
SHA1
7d2e332b39cfe3b477a070c828d4c2fecef9d21b
-
SHA256
0abc0a8473333d038c79dc23507edbec8b5c7e7ac2664ecf36c6bbc005c40f27
-
SHA512
710123d59132c254f032cfa7622b4174ba6596b2c37fd37cfcf29800413446fb20929fb107aada11bbcf79481459547a5b37f9de6459beedfd9b18ab77be047a
-
SSDEEP
24576:NY4inGirjYsb3WoN4onuFY42LL+meewRIB:WyinYKNfgY4CLkdRIB
Malware Config
Signatures
Files
-
0abc0a8473333d038c79dc23507edbec8b5c7e7ac2664ecf36c6bbc005c40f27.exe windows x86
b2ddb94ba7c9f5efbf7f4ea25fcdf725
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryA
SetLocalTime
CancelIo
GetProcessHeap
GetLocaleInfoA
IsBadWritePtr
GetFileAttributesA
HeapSize
VirtualProtect
GetModuleHandleA
SetLastError
CreateMailslotA
GetStdHandle
ReadConsoleW
DeleteFileA
GetDriveTypeW
GetCommandLineA
WriteFile
ResetEvent
ReleaseMutex
CreateDirectoryA
user32
PostMessageA
DispatchMessageA
GetCaretPos
LoadCursorA
PeekMessageA
GetWindowLongW
DrawIcon
DestroyMenu
SetCursor
GetWindowTextW
SetFocus
wsprintfA
GetCapture
filemgmt
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ