Static task
static1
Behavioral task
behavioral1
Sample
ab28439a1fe65e2ead9d5ea175e8a2922ab97bb9442c1768db79e269d3b3d097.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab28439a1fe65e2ead9d5ea175e8a2922ab97bb9442c1768db79e269d3b3d097.exe
Resource
win10v2004-20220812-en
General
-
Target
ab28439a1fe65e2ead9d5ea175e8a2922ab97bb9442c1768db79e269d3b3d097
-
Size
94KB
-
MD5
f93fab0eeb480bf3b51405d7d0113bbe
-
SHA1
31f739fba6338aefbd617a5bef5b14c612fd353a
-
SHA256
ab28439a1fe65e2ead9d5ea175e8a2922ab97bb9442c1768db79e269d3b3d097
-
SHA512
4a6d2c8f7a9abc0bbb05a3854b8bbfd35114fb72ee58839e8f0a11ebf408b2a58c105355990e85f0b2cfb5ee4360b1c419b05ebda98ac9bc486667114c338844
-
SSDEEP
1536:eQ/5Xfq261eUsXHnoiF4GCWAcraHTkq2pujEUHlmnpRzbB6OT5:eQhyCUIn9F4GzAcreTkTMIpxdjT5
Malware Config
Signatures
Files
-
ab28439a1fe65e2ead9d5ea175e8a2922ab97bb9442c1768db79e269d3b3d097.exe windows x86
fec67e4e6ebba7ba9f54fd5ab38f9ee4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentProcess
RemoveDirectoryA
GetUserDefaultLangID
DeleteFileA
GetConsoleOutputCP
CopyFileA
GetOEMCP
GetProcessHeap
GetCommandLineW
GlobalFindAtomW
lstrcmpiA
RemoveDirectoryW
SetCurrentDirectoryA
GetCommandLineA
lstrcmpiW
GetModuleHandleW
lstrcmpA
GetDriveTypeA
GlobalFindAtomA
GetWindowsDirectoryA
GetACP
GetTickCount
ExitProcess
QueryPerformanceCounter
GetVersion
IsDebuggerPresent
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
lstrlenA
lstrlenW
MulDiv
DeleteFileW
VirtualAlloc
GetStartupInfoA
gdi32
RestoreDC
SetTextColor
DeleteObject
PatBlt
GetDeviceCaps
GetTextMetricsA
GetObjectA
LineTo
CreateFontIndirectA
SaveDC
GetNearestPaletteIndex
GetPixel
SelectPalette
GetClipBox
CreateCompatibleDC
SetStretchBltMode
DeleteDC
GetStockObject
SetTextAlign
CreatePen
CreateSolidBrush
RectVisible
CreatePalette
SetMapMode
SelectObject
user32
CharNextA
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetDC
GetParent
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ