Static task
static1
Behavioral task
behavioral1
Sample
ab30dc4c4d788d864519b8ed2c1fd0901695bc4ce2971db3b186460278ac3b51.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab30dc4c4d788d864519b8ed2c1fd0901695bc4ce2971db3b186460278ac3b51.exe
Resource
win10v2004-20220812-en
General
-
Target
ab30dc4c4d788d864519b8ed2c1fd0901695bc4ce2971db3b186460278ac3b51
-
Size
173KB
-
MD5
5d631d47a7c5f8f1b7b42cd3a487756b
-
SHA1
63d45bf91066f15bd8437771b91ed4b9d72745f2
-
SHA256
ab30dc4c4d788d864519b8ed2c1fd0901695bc4ce2971db3b186460278ac3b51
-
SHA512
56685c12fbd891b22480f5ff5a0ac0ee18a88a1c837d78356f112f8ef697647c9ce5dbab1a5ac4122a5aead033fe77ed29b78654f37aa7e5402b57e6b6b07599
-
SSDEEP
3072:kpjhD+a2qdMvHfhEiL6J+q7UPB6Yc5ooHYZ5fqx3mKl94rbJJS9vHEs:QjV+Zq+WiLSePBy5ooL3mKAfJJ8r
Malware Config
Signatures
Files
-
ab30dc4c4d788d864519b8ed2c1fd0901695bc4ce2971db3b186460278ac3b51.exe windows x86
efaeefd82f45099816595c010d271d3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
shlwapi
GetAcceptLanguagesA
UrlUnescapeW
PathRemoveFileSpecW
PathAppendW
PathFindExtensionW
PathCreateFromUrlW
StrCmpIW
PathIsRelativeW
UrlCreateFromPathW
PathCombineW
kernel32
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GlobalFindAtomW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoA
InterlockedCompareExchange
GetLocaleInfoW
InterlockedExchange
UnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
EnumResourceLanguagesA
GetSystemTimeAsFileTime
GetProcessHeap
GetCurrentProcessId
GetPrivateProfileSectionW
VirtualProtect
SetUnhandledExceptionFilter
LocalAlloc
FoldStringW
DeleteFileW
Sections
.text Size: 91KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ