Static task
static1
Behavioral task
behavioral1
Sample
ab9567cc69c1f25f8b83616fc3ea4e2938afcbb5e2553b8db350bfdd4f237eb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab9567cc69c1f25f8b83616fc3ea4e2938afcbb5e2553b8db350bfdd4f237eb5.exe
Resource
win10v2004-20221111-en
General
-
Target
ab9567cc69c1f25f8b83616fc3ea4e2938afcbb5e2553b8db350bfdd4f237eb5
-
Size
193KB
-
MD5
75143021ebb26a04c6539ddefeda049c
-
SHA1
24fba075d4741f0004b9ec0e4259d145ae3a9e75
-
SHA256
ab9567cc69c1f25f8b83616fc3ea4e2938afcbb5e2553b8db350bfdd4f237eb5
-
SHA512
d79e97060801fe7023a21cf3e0448849cc8c085fd8e5f3321c04b18bc089079039a19452cb4efb352acffe80b9deb0193654fbf7b2476c71c9568f5d7de8e4a7
-
SSDEEP
3072:yJJqtCnwyfZsz76fIwbDO6E6xJ9/o60dl25AYAQ4YZgjus4f56o0o78i4UHKf2e:yT81n76AwXOMJi25AfQOn2yEHK2
Malware Config
Signatures
Files
-
ab9567cc69c1f25f8b83616fc3ea4e2938afcbb5e2553b8db350bfdd4f237eb5.exe windows x86
8c979feab98fd1d977c0f9e6d9f240c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegLoadKeyA
RegQueryInfoKeyA
RegDeleteKeyW
RegEnumValueW
RegFlushKey
RegQueryValueW
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyW
RegLoadKeyW
RegCloseKey
RegCreateKeyExA
RegGetKeySecurity
RegReplaceKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegLoadKeyA
RegQueryValueExW
RegQueryValueW
RegLoadKeyW
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyW
RegQueryValueExA
RegQueryInfoKeyW
RegEnumKeyA
RegOpenKeyW
RegFlushKey
RegReplaceKeyW
RegLoadKeyW
RegEnumKeyA
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExA
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExW
RegGetKeySecurity
RegDeleteValueW
RegQueryValueA
RegDeleteValueA
RegLoadKeyA
RegCloseKey
RegEnumKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueW
RegOpenKeyW
RegFlushKey
RegReplaceKeyA
RegFlushKey
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyA
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyW
RegQueryValueExA
RegEnumValueA
RegReplaceKeyW
RegLoadKeyW
RegEnumKeyW
user32
GetWindowTextLengthA
CloseWindow
IsWindow
AlignRects
LoadMenuA
InsertMenuA
IsMenu
CopyImage
CalcMenuBar
AppendMenuW
DrawIcon
DialogBoxParamW
GetDlgItem
DrawIconEx
AppendMenuA
LoadCursorA
CopyIcon
GetCursor
EndDialog
CalcMenuBar
DrawTextA
IsWindow
DrawTextW
GetMenu
CloseWindow
DrawIcon
GetDlgItem
LoadCursorA
DialogBoxParamA
LoadMenuA
DrawIconEx
CreateIcon
GetWindowTextLengthA
AppendMenuA
IsMenu
CopyRect
kernel32
Sleep
CreateProcessA
GetFileTime
ReadConsoleA
ExitThread
GetFileSize
CopyFileExW
CreateDirectoryA
GetLastError
WriteFile
DeleteFileA
GetConsoleMode
DeleteFileW
CreateThread
FindFirstFileA
GetCommandLineA
OpenFile
CopyFileW
GetComputerNameA
ReadConsoleW
CopyFileExA
Sleep
CopyFileExW
OpenFileMappingA
DeleteAtom
GlobalFree
GetLastError
GetCPInfo
CreateProcessA
ReadConsoleW
FindAtomA
GetLastError
GetFileSize
GetFileTime
CopyFileExA
CreateProcessA
OpenFile
GetCommandLineA
DeleteFileW
FindFirstFileA
CopyFileA
DeleteAtom
Sections
.tls Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b2222 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ