Static task
static1
Behavioral task
behavioral1
Sample
ab0b9a96053bf6e9f4213baace103351a2b6ae6847c37ce4998056ff0d6cccc7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab0b9a96053bf6e9f4213baace103351a2b6ae6847c37ce4998056ff0d6cccc7.exe
Resource
win10v2004-20220812-en
General
-
Target
ab0b9a96053bf6e9f4213baace103351a2b6ae6847c37ce4998056ff0d6cccc7
-
Size
811KB
-
MD5
373226b8d9b07b8fbd345b020aa25a3d
-
SHA1
dbb04990078759c7309a2c785a909850ffbbe8fd
-
SHA256
ab0b9a96053bf6e9f4213baace103351a2b6ae6847c37ce4998056ff0d6cccc7
-
SHA512
0775c0422935157847cc11ac60ef54ffb93f5b8361bad500bd21e5e961c03246b727eb79d3de8d64a7a1b6e7005558b7cbf0dcab1759a47bdaf4e11c3bb86205
-
SSDEEP
24576:LThg/iEbOgZLtutU429gTbaNIgw8PZp3zTv2mQPJpIyewDm8:XhgVb3LEtU4QgSNPw8xV32mQAuDt
Malware Config
Signatures
Files
-
ab0b9a96053bf6e9f4213baace103351a2b6ae6847c37ce4998056ff0d6cccc7.exe windows x86
e9ea87ee7ac78f3d548efc8fb3fd6882
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CloseHandle
FindAtomA
GetComputerNameA
SetLastError
GetLocalTime
GetStdHandle
FindClose
GetModuleHandleW
lstrlenW
GlobalFree
TlsGetValue
TlsAlloc
MapViewOfFile
GetLastError
GetPrivateProfileIntA
VirtualAlloc
CreateFileA
GetFileAttributesW
GetTickCount
user32
FillRect
CreateWindowExA
GetClassInfoA
CallWindowProcA
DestroyCaret
GetDlgItem
GetMenu
CloseWindow
EndDialog
GetClientRect
DrawStateA
GetCaretPos
DispatchMessageA
clbcatq
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ir50_32
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 801KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ