Static task
static1
Behavioral task
behavioral1
Sample
abdb863f0649319cd0796961944fb37ac5202d75d4abc3d032b8076111e3e2e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abdb863f0649319cd0796961944fb37ac5202d75d4abc3d032b8076111e3e2e0.exe
Resource
win10v2004-20221111-en
General
-
Target
abdb863f0649319cd0796961944fb37ac5202d75d4abc3d032b8076111e3e2e0
-
Size
332KB
-
MD5
ccfef7a1793ce60b67f101b395d528f1
-
SHA1
cceebe057b2f25c2bf375af776a237c023b86f79
-
SHA256
abdb863f0649319cd0796961944fb37ac5202d75d4abc3d032b8076111e3e2e0
-
SHA512
96a327b4b423a2d6b0fa9e2f1e5fce509151557d8fe52fa46c61fcbf65d004d4f4365fc8eb48c5ae69170d1349d2810cc7b76128dbf7800707f262c019fd9e15
-
SSDEEP
6144:kEY22qJfYZEQbi97yosiYi5gt+alEepca0o:k7ewg97yFiHYRX
Malware Config
Signatures
Files
-
abdb863f0649319cd0796961944fb37ac5202d75d4abc3d032b8076111e3e2e0.exe windows x86
94a9640d37fd04911446a4d35f516c32
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA
advapi32
RegCreateKeyA
RegDeleteValueA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
Sections
.text Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ