Static task
static1
Behavioral task
behavioral1
Sample
2abba19980e7137112e696eea1825a81ab115344d150460f6794f34e7d9cf52d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2abba19980e7137112e696eea1825a81ab115344d150460f6794f34e7d9cf52d.exe
Resource
win10v2004-20220901-en
General
-
Target
2abba19980e7137112e696eea1825a81ab115344d150460f6794f34e7d9cf52d
-
Size
20KB
-
MD5
d748fd28e62b6f70487c706850c9f6de
-
SHA1
f002bb50685d0f8e0a09f4b09a15c4d2a679578d
-
SHA256
2abba19980e7137112e696eea1825a81ab115344d150460f6794f34e7d9cf52d
-
SHA512
9e4bd04a65ad600ad9bd97823a7c41455aad9135fa1b478f8ed647c0b1a63a1acf3985b653cfd7ca4a6b0962ceab9cf5f3161a104d410cb6225232991b383aba
-
SSDEEP
384:GEuXuIKm5h28Scr7mj3eSW0l4xaWd7pxW3KzM:RLkfS0mTeSJw7p+K
Malware Config
Signatures
Files
-
2abba19980e7137112e696eea1825a81ab115344d150460f6794f34e7d9cf52d.exe windows x86
478e10df7cb8636d25495f4c68d1c4ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ord33598
ord33612
ord33622
ord33636
ord33662
ord33690
ord33706
ord33736
ord33756
ord33580
ord33798
ord33816
ord33848
ord33870
ord33902
ord33930
ord33962
ord33986
ord33556
ord33520
ord33776
ord33500
ord34094
ord34112
ord34124
ord34150
ord34174
ord34186
ord34214
ord34242
ord34266
ord34296
ord34320
ord34340
ord34350
hal
ord34046
ord34026
ord34066
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 896B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 768B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ