Static task
static1
Behavioral task
behavioral1
Sample
abd48fb93a99ec86e8371705562498ec3e64cacb1241b6d6d300b95bafb2327c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abd48fb93a99ec86e8371705562498ec3e64cacb1241b6d6d300b95bafb2327c.exe
Resource
win10v2004-20220901-en
General
-
Target
abd48fb93a99ec86e8371705562498ec3e64cacb1241b6d6d300b95bafb2327c
-
Size
167KB
-
MD5
a2779038869f85ded7dc42a1de86fe97
-
SHA1
4970a4a41fad769807b41a3353dd08158c5fdfcb
-
SHA256
abd48fb93a99ec86e8371705562498ec3e64cacb1241b6d6d300b95bafb2327c
-
SHA512
79d94349dfab343953a630effbf09091afeeb4af649bfd31d2865b6af88e8ab0ff1159438e0070dfcae8bb964abf0c46053ac7b76400edc53e603d5a89311cd4
-
SSDEEP
3072:01YEwJ0DI+nfgEXRsdi9xj9ewW9ji4gTYUjwnYIAiobT:PCIWvXYiPj9ewonUjwYPt
Malware Config
Signatures
Files
-
abd48fb93a99ec86e8371705562498ec3e64cacb1241b6d6d300b95bafb2327c.exe windows x86
ae9da4fff80dc4a409ecf9782ef71b9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetVersionExA
GetVersion
GetCurrentThreadId
lstrcpyA
WriteFile
CreateFileW
lstrcmpiA
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualAlloc
LoadResource
CloseHandle
TlsAlloc
TlsGetValue
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
QueryPerformanceCounter
GetProcAddress
HeapAlloc
IsValidCodePage
GetOEMCP
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
user32
UpdateWindow
ShowWindow
DestroyWindow
DefWindowProcA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconW
FindWindowA
DialogBoxParamA
GetClientRect
EndPaint
EndDialog
LoadStringA
RegisterClassExA
CreateWindowExA
gdi32
CreateBitmap
Rectangle
ole32
CoTaskMemAlloc
CoUninitialize
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rack Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ