Static task
static1
Behavioral task
behavioral1
Sample
ab509ebcb500fb6b16d80845f1f97c0cbbfdfccc8eb8453a9303614b20570e99.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab509ebcb500fb6b16d80845f1f97c0cbbfdfccc8eb8453a9303614b20570e99.exe
Resource
win10v2004-20220812-en
General
-
Target
ab509ebcb500fb6b16d80845f1f97c0cbbfdfccc8eb8453a9303614b20570e99
-
Size
155KB
-
MD5
fbd8f0d5e00e547c4ad3ffdd60d6dcbf
-
SHA1
8848384785cdb92db314c7a60f646afa6617cf12
-
SHA256
ab509ebcb500fb6b16d80845f1f97c0cbbfdfccc8eb8453a9303614b20570e99
-
SHA512
41e8968f696e3c421d052870362e49dc92bb154993a8cdd48bf853c7af5ebfaff91ff6c0ff955f47ae3a46d6700524881292288017e14497f536adf02037c0ce
-
SSDEEP
3072:mnyNNGncdY7an5uxmeXS1ZpMW+4zK+pLgZbz6xUSUvbqC3u0oj:mnyNQcdYGn8N4gZbz6Z+bqCc
Malware Config
Signatures
Files
-
ab509ebcb500fb6b16d80845f1f97c0cbbfdfccc8eb8453a9303614b20570e99.exe windows x86
84395a358c2ddb352f7e86780b3ddaa2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
CompareStringA
CreateDirectoryA
CreateEventA
CreateFileMappingA
CreateFileW
CreateProcessW
DuplicateHandle
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetPrivateProfileStringA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetVersionExA
GlobalAddAtomA
HeapFree
HeapReAlloc
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LCMapStringA
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MulDiv
OutputDebugStringA
ReleaseMutex
ResumeThread
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFileAttributesW
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpynA
lstrlenA
user32
CreatePopupMenu
DestroyCursor
DialogBoxParamA
DrawIconEx
EndPaint
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowA
GetCapture
GetClientRect
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetIconInfo
GetKeyboardType
GetMenuState
GetMenuStringA
GetMessageA
GetPropA
GetScrollInfo
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowRect
GetWindowThreadProcessId
InflateRect
IntersectRect
InvalidateRect
IsChild
IsIconic
IsRectEmpty
IsWindow
LoadBitmapA
LoadIconA
LoadStringA
MapWindowPoints
MessageBeep
MessageBoxA
OpenClipboard
PeekMessageA
RegisterClipboardFormatA
ReleaseCapture
RemoveMenu
ScrollWindow
SendMessageA
SetActiveWindow
SetClassLongA
SetForegroundWindow
SetMenu
SetScrollInfo
SetScrollPos
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowOwnedPopups
SystemParametersInfoA
TrackPopupMenu
UnhookWindowsHookEx
UnregisterClassA
WindowFromPoint
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE