Static task
static1
Behavioral task
behavioral1
Sample
ab0e923ed9cfb1afded116a38fba5628055cb675b5263d7ffa0bf694be6e5741.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab0e923ed9cfb1afded116a38fba5628055cb675b5263d7ffa0bf694be6e5741.exe
Resource
win10v2004-20220812-en
General
-
Target
ab0e923ed9cfb1afded116a38fba5628055cb675b5263d7ffa0bf694be6e5741
-
Size
111KB
-
MD5
93dfeb33c0385f40b496c51353b122dd
-
SHA1
9cf3f8c5ce458e6a0bdaf5119479a11c52130975
-
SHA256
ab0e923ed9cfb1afded116a38fba5628055cb675b5263d7ffa0bf694be6e5741
-
SHA512
b73fec702c9b6780bcfe3222ff5270438f978808a6cdb404ff23f0eee4805279f1254a71afa0c9575d8ab63c27aff60d898669ac6ea5959110c781b275243859
-
SSDEEP
3072:votIsu6z8EYIlNSbgK1JzeG6Qg06Ylswg:vl8YESMCzUQg06+7
Malware Config
Signatures
Files
-
ab0e923ed9cfb1afded116a38fba5628055cb675b5263d7ffa0bf694be6e5741.exe windows x86
9069ac45d0414700c0d3f8a25235a142
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
__p__commode
signal
__setusermatherr
_iob
exit
__p__environ
_exit
memmove
_initterm
_acmdln
fwrite
fputs
atexit
getenv
strchr
_snprintf
__set_app_type
calloc
strlen
__getmainargs
_except_handler3
_vsnprintf
__p__fmode
free
_errno
_adjust_fdiv
kernel32
GetCurrentDirectoryA
InterlockedExchange
Sleep
GetStringTypeExA
GetCurrentProcessId
GetUserDefaultLangID
WideCharToMultiByte
VirtualAlloc
CopyFileA
WriteFile
FreeLibrary
GetUserDefaultLCID
LoadLibraryExW
ReadFile
GetProcAddress
GetStartupInfoA
SetFileAttributesA
gdi32
GetClipBox
GetOutlineTextMetricsA
SetColorAdjustment
EndPath
CreateCompatibleDC
EnumEnhMetaFile
StretchBlt
GetTextFaceA
GetMetaFileBitsEx
FrameRgn
OffsetClipRgn
RestoreDC
ole32
OleRun
CoTaskMemRealloc
CoLoadLibrary
CreateItemMoniker
CLSIDFromProgID
CreateStreamOnHGlobal
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoRegisterClassObject
DoDragDrop
CoInitialize
OleSetClipboard
ProgIDFromCLSID
StgOpenStorage
advapi32
CryptAcquireContextA
OpenProcessToken
RegDeleteValueW
CryptGenRandom
RegOpenKeyA
InitiateSystemShutdownA
OpenServiceA
RegFlushKey
LookupPrivilegeValueA
QueryServiceStatus
oleaut32
GetErrorInfo
SetErrorInfo
LoadTypeLib
SysFreeString
CreateErrorInfo
SysReAllocStringLen
SysAllocStringLen
user32
GetForegroundWindow
PeekMessageA
IsDialogMessageA
SetPropA
GetClassInfoA
IsZoomed
SetScrollInfo
comctl32
ImageList_GetIconSize
ImageList_GetBkColor
CreateStatusWindowA
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Read
ImageList_SetDragCursorImage
ImageList_GetIcon
ImageList_GetImageInfo
InitCommonControls
CreateToolbarEx
ImageList_Remove
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ