Static task
static1
Behavioral task
behavioral1
Sample
ab8cbcad6bfd3515869829640703137a23f2ad3b52fcc0cf02507f27e7bf0c6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab8cbcad6bfd3515869829640703137a23f2ad3b52fcc0cf02507f27e7bf0c6c.exe
Resource
win10v2004-20220812-en
General
-
Target
ab8cbcad6bfd3515869829640703137a23f2ad3b52fcc0cf02507f27e7bf0c6c
-
Size
172KB
-
MD5
efb4e7958dd6c513a1d1d2e74d0c97aa
-
SHA1
744d63aeaf0b195be26ba4dd542c000d7efba8d0
-
SHA256
ab8cbcad6bfd3515869829640703137a23f2ad3b52fcc0cf02507f27e7bf0c6c
-
SHA512
70b364a1e3b8302272230ce44222ee5714683b4b27381fdd274e3c1cfe71406d935cabc591c221208a576c7ddbd07f56c0fc5368216ea4de2f829a1b31b18be7
-
SSDEEP
1536:B4WdNtUHJ20ASbvLQ37VNOUwo0OTBNwkrAW3MVopTlPiloCI/TXf:Bhdks0rbvLcrOUw7OTB2kXaloX/7f
Malware Config
Signatures
Files
-
ab8cbcad6bfd3515869829640703137a23f2ad3b52fcc0cf02507f27e7bf0c6c.exe windows x86
566ae628d4cf78cab6b75963ea072f26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
gdi32
LineTo
MoveToEx
kernel32
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
FlushFileBuffers
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
SetConsoleCtrlHandler
CloseHandle
VirtualAlloc
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ