Static task
static1
Behavioral task
behavioral1
Sample
ac5abb529290c680f96cd7a10ffe0b8552f413e5dae5e5d190920aa030192cfa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac5abb529290c680f96cd7a10ffe0b8552f413e5dae5e5d190920aa030192cfa.exe
Resource
win10v2004-20220812-en
General
-
Target
ac5abb529290c680f96cd7a10ffe0b8552f413e5dae5e5d190920aa030192cfa
-
Size
363KB
-
MD5
7758b097db723bdd4bb261337890c36a
-
SHA1
6dc18cb8f4977b86e8dba36c3ee6c75f4d4bdb6a
-
SHA256
ac5abb529290c680f96cd7a10ffe0b8552f413e5dae5e5d190920aa030192cfa
-
SHA512
c5ebf7ad54d8b4afe138336146f42dbdaaa10198204e46635bacb2a6d204bfbceb3fc5584f6915ad822def55dc29c51add10bfc4e9884219811ed980ad78e348
-
SSDEEP
6144:oRMMha4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:oRMMQx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
Files
-
ac5abb529290c680f96cd7a10ffe0b8552f413e5dae5e5d190920aa030192cfa.exe windows x86
9ad69ffc90d01926e484fdf7a455471e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
EnumCalendarInfoW
HeapCreate
GlobalFree
ResumeThread
ReadFile
GetCurrentThreadId
GetPrivateProfileStringW
CreateMailslotA
GetCurrentProcessId
FindClose
FindAtomW
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetLastError
EnterCriticalSection
GetConsoleAliasW
SetEvent
user32
DispatchMessageA
GetMenuInfo
DrawTextW
IsWindow
SetFocus
GetCursorInfo
GetSysColor
DispatchMessageA
GetKeyboardType
GetClientRect
GetKeyState
CallWindowProcW
GetClassInfoA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ