Static task
static1
Behavioral task
behavioral1
Sample
8abf3ec1a25b64164ff103f3364b81a3577f9d1c812a6edba89b95379c6a2153.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8abf3ec1a25b64164ff103f3364b81a3577f9d1c812a6edba89b95379c6a2153.exe
Resource
win10v2004-20220812-en
General
-
Target
8abf3ec1a25b64164ff103f3364b81a3577f9d1c812a6edba89b95379c6a2153
-
Size
308KB
-
MD5
fbe029f13d9a4726c104bddf4c0ce47a
-
SHA1
5edac32ea39f53b0106c95bbe5316de7a391af00
-
SHA256
8abf3ec1a25b64164ff103f3364b81a3577f9d1c812a6edba89b95379c6a2153
-
SHA512
1cbd1b5028e09e23faf5082e450a0a563bf3b55c06496f62ddef488b233aaeac50b3eb446a70a22fef563d2f5a9bebfbd768746c3fc31643ae216f23ef232ebc
-
SSDEEP
6144:r1XtAegnmm5WJhhv7f4xSVg5wZjqfIOqgRJ4EEKHxmj2MHmFU8zbchF02:r1XtAeWABjf4xSVNXQEEDRSjwU8zAY
Malware Config
Signatures
Files
-
8abf3ec1a25b64164ff103f3364b81a3577f9d1c812a6edba89b95379c6a2153.exe windows x86
8414b26fa2e3285f9682146a4e7e1dd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
FindAtomW
HeapCreate
GetComputerNameW
GetDiskFreeSpaceW
LoadLibraryW
GetCommandLineW
LocalFree
ResetEvent
GetFileAttributesA
GetTickCount
lstrcpynA
GetDriveTypeA
CreateFileA
ReleaseMutex
ReleaseMutex
GetTickCount
GetModuleHandleW
ExitThread
CloseHandle
user32
FillRect
GetKeyState
DispatchMessageA
CallWindowProcA
GetClassInfoA
EndDialog
DrawStateA
GetComboBoxInfo
DestroyCaret
CloseWindow
GetDlgItem
GetMenu
CreateWindowExA
snmpapi
SnmpTfxQuery
SnmpTfxClose
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpTfxOpen
modemui
CountryRunOnce
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ