Static task
static1
Behavioral task
behavioral1
Sample
ac4e9d11acbbf336be2889e3bbd12b9a4c0195b809d0eefa3c0d0fb24331c0e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac4e9d11acbbf336be2889e3bbd12b9a4c0195b809d0eefa3c0d0fb24331c0e0.exe
Resource
win10v2004-20221111-en
General
-
Target
ac4e9d11acbbf336be2889e3bbd12b9a4c0195b809d0eefa3c0d0fb24331c0e0
-
Size
266KB
-
MD5
49abfb2a983fc3cb2a314633705bb2f8
-
SHA1
5dc2759b0285fd8e6807728712bb6c5012f5a45e
-
SHA256
ac4e9d11acbbf336be2889e3bbd12b9a4c0195b809d0eefa3c0d0fb24331c0e0
-
SHA512
430c7f3b87b9d54addaa06867ecd742af79f2c7bab6f6a62d9858e422b1b87cf2e986a4c6bfc0dc6224df11c1d4689654c3bdee59a94390fc9de48d4bb698ded
-
SSDEEP
6144:R6WNPsiwNGXvfyoZ2k42tkJWEIUgfOubd1in6MukY3XTl:/p+NGffB2kyJWE0fXXiu73XTl
Malware Config
Signatures
Files
-
ac4e9d11acbbf336be2889e3bbd12b9a4c0195b809d0eefa3c0d0fb24331c0e0.exe windows x86
05159bbb1d2f05911544a3435c6eac6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
LoadLibraryW
IsBadStringPtrW
WriteFile
FindClose
GetPrivateProfileStringA
lstrlenW
GetCurrentThreadId
HeapCreate
GetFileTime
GetCurrentProcessId
GetDriveTypeA
InitializeCriticalSection
TlsGetValue
GlobalFlags
ReleaseMutex
CreateEventW
LocalFree
FindAtomA
ReleaseMutex
user32
GetSysColor
GetSysColor
CallWindowProcW
DrawStateW
GetClassInfoA
CreateWindowExA
GetKeyboardType
EndDialog
SetFocus
DispatchMessageA
IsWindow
DrawTextA
GetClientRect
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ