Static task
static1
Behavioral task
behavioral1
Sample
acfde72aab68dab873bdd4510a17ad6ed3dad4a2f90be3ed5dfe8a114382c8de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acfde72aab68dab873bdd4510a17ad6ed3dad4a2f90be3ed5dfe8a114382c8de.exe
Resource
win10v2004-20221111-en
General
-
Target
acfde72aab68dab873bdd4510a17ad6ed3dad4a2f90be3ed5dfe8a114382c8de
-
Size
204KB
-
MD5
0b11b664ac8b05af7bde1bfaf9a27822
-
SHA1
9334cc5f8d13c594f2a498536526fd23b1a8ffde
-
SHA256
acfde72aab68dab873bdd4510a17ad6ed3dad4a2f90be3ed5dfe8a114382c8de
-
SHA512
373c4a840e6ce899ed6abe30acc4e1a4054465e3d9e1988f98ad765b5829329b04a63ac2c840f628a64f427f77bdc37934dd08d5340814aaca71cfb934a2e9a7
-
SSDEEP
3072:E3f1/0bTwoKWqyF65ehabW87/V9r5rIB1nsGjnvd1mNVdTFCR9g3IDs4+ngQcCTy:eV0/wvQ65dWWFk/sSd1K9CjgDnTTOP57
Malware Config
Signatures
Files
-
acfde72aab68dab873bdd4510a17ad6ed3dad4a2f90be3ed5dfe8a114382c8de.exe windows x86
5894dbab63b5fea09a791bdd92c8f534
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueA
kernel32
CloseHandle
CreateFileW
CreateThread
ExitProcess
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
TlsAlloc
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy
user32
CloseClipboard
CopyRect
CreateDialogParamW
CreateMenu
CreatePopupMenu
DispatchMessageW
DrawIconEx
EnumDisplaySettingsW
GetFocus
GetSubMenu
GetSystemMenu
GetUpdateRect
GetWindow
GetWindowDC
GetWindowTextW
InflateRect
InsertMenuItemW
InvalidateRect
IsZoomed
LoadIconW
OffsetRect
PeekMessageW
PostThreadMessageW
RegisterClassW
RegisterClipboardFormatW
ScreenToClient
SetFocus
SetWindowTextW
ShowCursor
TranslateMessage
UnregisterClassW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 45KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ