?InitConfigDir@@YGHHPAUHINSTANCE__@@|U
Static task
static1
Behavioral task
behavioral1
Sample
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8.exe
Resource
win10v2004-20220812-en
General
-
Target
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
Size
185KB
-
MD5
0f42113e3b660af93e5fef09615cb727
-
SHA1
be1f82b12dbc572f29516cef5859bc75024b52d5
-
SHA256
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
SHA512
af12253e930ef35594a5c600ae1da977251c57b9c45e503ec6cf2c220a65e550e9a3b3e0c2f367b23b3a1f29471f01bf7418c97033758dd544cb5281f30f7578
-
SSDEEP
3072:mvRA50GP0vJ1uD8j6LqNPWWTBp1YsS+NSfXPc8/5/u0G:90RELqZWW9vhxsPfNu0
Malware Config
Signatures
Files
-
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8.exe windows x86
c344f7eed4d31041af6e3d4786550317
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
memset
__p__commode
_amsg_exit
wcsrchr
wcsncpy
_initterm
_ismbblead
_XcptFilter
_exit
atoi
_cexit
__setusermatherr
clock
__getmainargs
shlwapi
UrlGetLocationA
UrlIsOpaqueW
kernel32
GetHandleInformation
OpenSemaphoreW
GetModuleHandleA
lstrcmpiW
lstrcpynA
GlobalGetAtomNameW
LoadResource
GetSystemDirectoryW
FindResourceA
lstrlenA
GetModuleFileNameA
user32
GetPropW
DragObject
RegisterWindowMessageW
wsprintfW
GetDC
GetWindowLongA
AdjustWindowRectEx
IsCharAlphaA
FindWindowExW
gdi32
GetTextExtentPoint32A
StartPage
AddFontResourceW
MoveToEx
CreateRectRgnIndirect
Exports
Exports
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ