Static task
static1
Behavioral task
behavioral1
Sample
abf1569d94ae98e26e32fa9e92d5dd49e4c0763c67af85b3a9fdba59e7bbcfbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abf1569d94ae98e26e32fa9e92d5dd49e4c0763c67af85b3a9fdba59e7bbcfbd.exe
Resource
win10v2004-20220812-en
General
-
Target
abf1569d94ae98e26e32fa9e92d5dd49e4c0763c67af85b3a9fdba59e7bbcfbd
-
Size
304KB
-
MD5
ef59d4c86e35c79becd1b0f156df490a
-
SHA1
61db42bf6b21457b318e8d75ec08cfb133e4205f
-
SHA256
abf1569d94ae98e26e32fa9e92d5dd49e4c0763c67af85b3a9fdba59e7bbcfbd
-
SHA512
57c0485fc1e6abfd08ea4497c8e7087f041b97fb20f97de0fe73bbe2dfbf4a3acd6985f7306f9cc607c3f9252bde287ebb26c768099ec28ba7d7508965c45b5b
-
SSDEEP
6144:DKjp3yBZA+nb6kyEBU5cR1OGko1R4bkUHMt5SRiljfAseyBE:+jcxb8ATOGkoks0ix/nBE
Malware Config
Signatures
Files
-
abf1569d94ae98e26e32fa9e92d5dd49e4c0763c67af85b3a9fdba59e7bbcfbd.exe windows x86
f40a74e125709fc027f2e40f04a52ea5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
DeleteFileA
GetModuleHandleW
VirtualAlloc
WriteConsoleA
InitializeCriticalSection
CreateSemaphoreW
InterlockedExchange
CreateEventW
FatalExit
DeleteFileA
CreateFileMappingW
CreatePipe
SetVolumeLabelA
Sleep
GetShortPathNameA
GetProcessHeap
DeleteFileA
DeviceIoControl
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStringTypeW
GetModuleHandleA
mshtml
DllCanUnloadNow
DllGetClassObject
PrintHTML
ShowModalDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrs Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ