Static task
static1
Behavioral task
behavioral1
Sample
d0ab96da3f7bc502df29dfae68483a587a27a5697fa8a23c8a40e960dfab337a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0ab96da3f7bc502df29dfae68483a587a27a5697fa8a23c8a40e960dfab337a.exe
Resource
win10v2004-20220812-en
General
-
Target
d0ab96da3f7bc502df29dfae68483a587a27a5697fa8a23c8a40e960dfab337a
-
Size
80KB
-
MD5
7b17148d05e7ef6124669e60aaceaefd
-
SHA1
4632c6049af3eadcd7913ec998d6ec3656d426fd
-
SHA256
d0ab96da3f7bc502df29dfae68483a587a27a5697fa8a23c8a40e960dfab337a
-
SHA512
9e6056423bfed6a5c9c2239f2cc78887820b0999f947ad640a0c2d159d28d63f9571efdf105812a106cbbc094b62f3245231135d38c1ff200b64dc94180985c5
-
SSDEEP
1536:B6by9Ow+PDLOu5hyo06zPvf0YMjVv/6rFrSrlRCk2Vx:knrlXyd6znf0YM5v/aU1ex
Malware Config
Signatures
Files
-
d0ab96da3f7bc502df29dfae68483a587a27a5697fa8a23c8a40e960dfab337a.exe windows x86
b8824255affdc045d505759a36d2750e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
rand
memset
time
memcpy
sqrt
memmove
clock
swprintf
atol
wcscspn
shlwapi
SHGetValueA
ole32
OleCreateStaticFromData
StgOpenStorage
StgCreateDocfileOnILockBytes
OleRegGetUserType
GetHGlobalFromStream
kernel32
LoadLibraryA
GetCommandLineA
GetStdHandle
GetCurrentThread
ReadFile
GetLocaleInfoA
SetEndOfFile
SetFilePointer
ExitThread
LoadLibraryExA
HeapDestroy
WriteFile
VirtualAlloc
GetLastError
GetACP
ExitProcess
gdi32
GetDCOrgEx
BitBlt
version
VerQueryValueA
GetFileVersionInfoA
VerFindFileA
Sections
.tls Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ