Static task
static1
Behavioral task
behavioral1
Sample
4ab3986204097c8708b0b04e3a589fa6186ce1f8896c93628928aaa7fb6119f4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ab3986204097c8708b0b04e3a589fa6186ce1f8896c93628928aaa7fb6119f4.exe
Resource
win10v2004-20220812-en
General
-
Target
4ab3986204097c8708b0b04e3a589fa6186ce1f8896c93628928aaa7fb6119f4
-
Size
29KB
-
MD5
842190fec1bfb71fa656e82e4542d107
-
SHA1
33675ede8d0a565bf012a0419877413e92288b12
-
SHA256
4ab3986204097c8708b0b04e3a589fa6186ce1f8896c93628928aaa7fb6119f4
-
SHA512
152754ff8d5210354dcba64c4f0ba603c3539766daaa472b890f936018a1bce8e692b8c652f1f0c66afcb639b528eccf874df469abd85d1d78a2a428d883c73b
-
SSDEEP
768:ULlqJCqR7d10UmFFjpoNIb6aAc/1W6+wihFMQUMuD:eaBYJldihFMQ1uD
Malware Config
Signatures
Files
-
4ab3986204097c8708b0b04e3a589fa6186ce1f8896c93628928aaa7fb6119f4.exe windows x86
08b30f443e12b606a7dff020d93e1792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
lstrcatA
LeaveCriticalSection
GetStartupInfoW
SetFileTime
SetFileAttributesW
GetModuleHandleW
CreateMutexW
IsBadWritePtr
ReadFile
SetFileTime
HeapCreate
lstrcpyA
GetFileSize
SetFileTime
FindResourceA
GetLocalTime
FormatMessageW
GetModuleHandleA
InitializeCriticalSection
CloseHandle
msi
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseAllHandles
user32
IsWindow
IsDialogMessageA
GetWindowTextA
SetFocus
GetWindowLongW
IsZoomed
wsprintfW
DispatchMessageA
PeekMessageW
GetWindowRect
PostMessageW
SetCursorPos
LoadCursorW
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE