Static task
static1
Behavioral task
behavioral1
Sample
00ab09b6685cdbf8e9cd878b64558cef8d36fa29309f439383db4558f6a877a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00ab09b6685cdbf8e9cd878b64558cef8d36fa29309f439383db4558f6a877a2.exe
Resource
win10v2004-20220901-en
General
-
Target
00ab09b6685cdbf8e9cd878b64558cef8d36fa29309f439383db4558f6a877a2
-
Size
117KB
-
MD5
72a13fed379218124a2e7e61069550cf
-
SHA1
e50f762f614b005d78aaa4ef7f706c1d8a27cf75
-
SHA256
00ab09b6685cdbf8e9cd878b64558cef8d36fa29309f439383db4558f6a877a2
-
SHA512
df6fb525b4fa4917180456b368c25645fc61ea83da8fb1f8fcec632dd83605fdc20e89efbc729bb9e38e16794d2cb3b5949a5fcd67f14f7c9f631cdaa58deab8
-
SSDEEP
3072:7f+MZvmVlsQyfHzqd6MpvZCVPyYG4dRzuGVj:7+0mUQgu8MpMV3jBh
Malware Config
Signatures
Files
-
00ab09b6685cdbf8e9cd878b64558cef8d36fa29309f439383db4558f6a877a2.exe windows x86
c0ca8fb524d53a294a75f3adfde9e816
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
user32
MessageBoxA
Sections
.data Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ