Static task
static1
Behavioral task
behavioral1
Sample
2abbd99a9723729273d1abdf756cf6a778021fb7c3919e87ca4d0dacee97b724.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2abbd99a9723729273d1abdf756cf6a778021fb7c3919e87ca4d0dacee97b724.exe
Resource
win10v2004-20220812-en
General
-
Target
2abbd99a9723729273d1abdf756cf6a778021fb7c3919e87ca4d0dacee97b724
-
Size
217KB
-
MD5
1364981411c9784585323c5f2e074b46
-
SHA1
ce27007119179595ee6663ae4a6c0066ab5edf10
-
SHA256
2abbd99a9723729273d1abdf756cf6a778021fb7c3919e87ca4d0dacee97b724
-
SHA512
05ad1e205d05bb7214cf4f46286bd324632a89e6cabfa7e909686dd73dd5fc60fdb6fa9af486a9231fa008fea35853a73544fe7c25510763166a7f0cdee93c28
-
SSDEEP
3072:xYljo10usNZws9KJrGm/Z9tw8yPd9TAuOtBmzOOGiL+E5PQOwAOq6ZOy3zg:xyjCsiDZPO9TxOyVLBK3q6gyD
Malware Config
Signatures
Files
-
2abbd99a9723729273d1abdf756cf6a778021fb7c3919e87ca4d0dacee97b724.exe windows x86
fe52f24d3085a281ce0c7218399a22e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CloseHandle
GetLastError
GetCurrentDirectoryA
GetStringTypeW
GetEnvironmentStringsW
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetStringTypeA
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WriteFile
HeapFree
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
SetFilePointer
HeapAlloc
LCMapStringA
LCMapStringW
SetStdHandle
GetProcAddress
LoadLibraryA
FlushFileBuffers
user32
MessageBoxA
advapi32
ControlService
StartServiceA
OpenSCManagerA
CloseServiceHandle
DeleteService
OpenServiceA
CreateServiceA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 911B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tc Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE