Static task
static1
Behavioral task
behavioral1
Sample
ab74438a4b9b8b4c654ffe58ec7ae27be67b750be3e37ca09b2507a5ffa8fec9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab74438a4b9b8b4c654ffe58ec7ae27be67b750be3e37ca09b2507a5ffa8fec9.exe
Resource
win10v2004-20220812-en
General
-
Target
ab74438a4b9b8b4c654ffe58ec7ae27be67b750be3e37ca09b2507a5ffa8fec9
-
Size
126KB
-
MD5
7d9a3f78d430e8421bb91bb223755a67
-
SHA1
5a3ce39216ed4d90a24ce11f4a2574e760f3076b
-
SHA256
ab74438a4b9b8b4c654ffe58ec7ae27be67b750be3e37ca09b2507a5ffa8fec9
-
SHA512
6de49c9725fdb8c4a880f7b8d3bd497552f4bda1a419a24fc8ff791b13e34ed155534fd625ab4a3bd723b7f20bf38729a2910936cab339084394396e7df72704
-
SSDEEP
3072:u2Yg/LUoUWSHT5btH4hvpFPJpZLB5lCdGXogMpdupc1YiWs:p5/LUoqztt0FxpZLBjCdGXbMpduI7W
Malware Config
Signatures
Files
-
ab74438a4b9b8b4c654ffe58ec7ae27be67b750be3e37ca09b2507a5ffa8fec9.exe windows x86
254b22a8064dcd4db50f017abf441745
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
AreFileApisANSI
CommConfigDialogA
ConnectNamedPipe
CopyFileExA
DeleteFileA
ExitProcess
FindAtomA
FlushInstructionCache
FlushViewOfFile
GetAtomNameA
GetBinaryTypeA
GetCommMask
GetCommandLineA
GetConsoleCursorInfo
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetModuleHandleA
GetPrivateProfileStringA
GetPrivateProfileStructA
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemDefaultLCID
GetTickCount
GetVolumeInformationA
GlobalFindAtomA
GlobalLock
HeapCreate
LocalLock
MapViewOfFileEx
OpenMutexA
OpenProcess
PostQueuedCompletionStatus
QueryDosDeviceA
QueryPerformanceCounter
ResumeThread
SetUnhandledExceptionFilter
WaitForMultipleObjects
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
fseek
malloc
memset
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE