Static task
static1
Behavioral task
behavioral1
Sample
ab5ad37a08e4e320a3487b86da2e9058a8daca69264fd4218a86a5527c0305d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab5ad37a08e4e320a3487b86da2e9058a8daca69264fd4218a86a5527c0305d7.exe
Resource
win10v2004-20220812-en
General
-
Target
ab5ad37a08e4e320a3487b86da2e9058a8daca69264fd4218a86a5527c0305d7
-
Size
790KB
-
MD5
7beed13e98a9778e62a6184edc8dc43d
-
SHA1
6306466c7188946e58e7812c0745facb1c203dde
-
SHA256
ab5ad37a08e4e320a3487b86da2e9058a8daca69264fd4218a86a5527c0305d7
-
SHA512
7d5274f77a8fa46f7a283eb09e2eaa6b556491e62d63edbbb75d42a54327c78af7b0d8e0ca1bf31cb68d07345e0e2698921bee6de23bf3ece20963a7c0276659
-
SSDEEP
12288:a5hP8NESZFOhqyoS63kPmA7vxeghMI7l+H1IBNRfnerysE5K58:avnS/woSKlas1IpfeM5K5
Malware Config
Signatures
Files
-
ab5ad37a08e4e320a3487b86da2e9058a8daca69264fd4218a86a5527c0305d7.exe windows x86
109e94e9ed947d9f4e32f3be03dd7501
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
CloseHandle
GetCurrentDirectoryW
FindResourceA
GetStartupInfoW
SetFileTime
SetFileAttributesW
IsBadWritePtr
GetLocalTime
CreateMutexW
FormatMessageW
GetLastError
SetFileTime
LeaveCriticalSection
lstrcpyA
ReadFile
SetFileTime
lstrcatA
InitializeCriticalSection
HeapCreate
GetFileSize
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCreateRecord
user32
LoadCursorW
GetWindowRect
GetWindowLongW
wsprintfW
IsWindow
DispatchMessageA
PostMessageW
SetCursorPos
PeekMessageW
GetWindowTextA
IsDialogMessageA
SetFocus
IsZoomed
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 775KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE