Static task
static1
Behavioral task
behavioral1
Sample
dabb8e2a1e314f53a4a58347119c2791942142b8e2cbe8cd6c764c94d10ae552.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dabb8e2a1e314f53a4a58347119c2791942142b8e2cbe8cd6c764c94d10ae552.exe
Resource
win10v2004-20220812-en
General
-
Target
dabb8e2a1e314f53a4a58347119c2791942142b8e2cbe8cd6c764c94d10ae552
-
Size
137KB
-
MD5
3bec638e7d6cc575a52088eccd36daa0
-
SHA1
96f65c134bcb785a1092c51e67ed70efbaa933c1
-
SHA256
dabb8e2a1e314f53a4a58347119c2791942142b8e2cbe8cd6c764c94d10ae552
-
SHA512
9ee77b1361c9973308fcf460236a45dfd0bf17c8257e5e6dbcd0189338059dde26fb6c57851cf8d261d33e51c31edf02714b8f4df07a9fd9936d05bf07d0c25f
-
SSDEEP
3072:+AdtraHqtgfvxPad1bRsZ6QU1JwhL+dnWZLyhUh+l6O:g3wvb/Hwxu0Lrhi
Malware Config
Signatures
Files
-
dabb8e2a1e314f53a4a58347119c2791942142b8e2cbe8cd6c764c94d10ae552.exe windows x86
1e1301c0041aaad2a72d5d5bc5c4b4e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
LoadResource
FindResourceExA
CloseHandle
WaitForSingleObject
CreateProcessA
lstrcpyA
lstrlenA
GetSystemDefaultLangID
GetLastError
CreateMutexA
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
user32
wsprintfA
MessageBoxA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE