Static task
static1
Behavioral task
behavioral1
Sample
ab8ac024758aa3cf63e0615da475a65b6d114cb3fb084420242e2fa92e06aa24.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab8ac024758aa3cf63e0615da475a65b6d114cb3fb084420242e2fa92e06aa24.exe
Resource
win10v2004-20221111-en
General
-
Target
ab8ac024758aa3cf63e0615da475a65b6d114cb3fb084420242e2fa92e06aa24
-
Size
283KB
-
MD5
be1bd830bedd11c4ddad267276c6130d
-
SHA1
76d49e6103153f5bef26ef19341902693f230a28
-
SHA256
ab8ac024758aa3cf63e0615da475a65b6d114cb3fb084420242e2fa92e06aa24
-
SHA512
2e884706a7782aaf32ed44c622b8270d69a58d2d30d3ec116cde777c66ec8d86a51c5a9a3e7ed8e029cb276423b6f1fc5ff36c072448a9f11fa8a32cff12bc71
-
SSDEEP
6144:ZEm/Ge/6T7cAO2AE+YoKDz1+IhMHfzaF6f38UnWfc7VU:ZEZeST7csAt9KdnCfQg8
Malware Config
Signatures
Files
-
ab8ac024758aa3cf63e0615da475a65b6d114cb3fb084420242e2fa92e06aa24.exe windows x86
aab6d1ac9dc7f680c001122724be68db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetModuleHandleA
ReleaseMutex
GetThreadPriority
SetEvent
VirtualAlloc
GetThreadTimes
IsDBCSLeadByte
TlsFree
CreatePipe
CreateMutexA
GetUserDefaultLangID
GetThreadLocale
GetConsoleCP
GetShortPathNameA
GetOEMCP
CancelWaitableTimer
GetLargestConsoleWindowSize
GetExitCodeThread
TlsGetValue
CompareStringA
user32
GetWindowTextLengthA
ShowWindow
GetFocus
GetDC
GetActiveWindow
GetWindow
GetWindowTextA
InvalidateRect
ValidateRect
RegisterClassA
GetForegroundWindow
GetClassNameA
CloseWindow
IsIconic
ReleaseDC
ReleaseDC
GetSystemMetrics
GetClassInfoExA
IsWindowVisible
msutb
DllGetClassObject
GetPopupTipbar
DllCanUnloadNow
ClosePopupTipbar
GetLibTls
shimeng
SE_DynamicShim
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ