Static task
static1
Behavioral task
behavioral1
Sample
abf613604dc1a9d10439f81c7d6d4a5ae9d3307b51a6cda2918cbe8a47e186a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abf613604dc1a9d10439f81c7d6d4a5ae9d3307b51a6cda2918cbe8a47e186a6.exe
Resource
win10v2004-20220812-en
General
-
Target
abf613604dc1a9d10439f81c7d6d4a5ae9d3307b51a6cda2918cbe8a47e186a6
-
Size
800KB
-
MD5
2fff54fad0fc5f1ce7628d0b3bf4a1c7
-
SHA1
1197df93758de26eb415438c98c5eed18e474c73
-
SHA256
abf613604dc1a9d10439f81c7d6d4a5ae9d3307b51a6cda2918cbe8a47e186a6
-
SHA512
337da065da537deaafaa1585e0f924b1639b943df27e2507233ae6e359fbe7615c799a6d9a55c341763a4d074a910002f17918c2f84064eb9bf22209896f4c42
-
SSDEEP
24576:BlmLL/A7Y5YJEga/6bupxX1OwNsXyNaHaHaHa:BQADEzxX1OgsB666
Malware Config
Signatures
Files
-
abf613604dc1a9d10439f81c7d6d4a5ae9d3307b51a6cda2918cbe8a47e186a6.exe windows x86
7898d8f7003032fea7f07d8183306898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
VirtualAlloc
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetVersionExA
HeapAlloc
user32
RegisterClassA
AnimateWindow
MoveWindow
GetSysColor
ShowWindowAsync
CloseWindow
GetWindow
BringWindowToTop
GetTitleBarInfo
DefWindowProcA
PostQuitMessage
CreateWindowExA
advapi32
RegLoadKeyA
RegCreateKeyA
Sections
.text Size: 780KB - Virtual size: 779KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE