Static task
static1
Behavioral task
behavioral1
Sample
ab6d706801e34aa285ca6f4b1a370161ddabc1d477503d4bbb31ac75975a0c1b.exe
Resource
win7-20220812-en
General
-
Target
ab6d706801e34aa285ca6f4b1a370161ddabc1d477503d4bbb31ac75975a0c1b
-
Size
115KB
-
MD5
33a0eb3eaf627bb97b00469297199ef0
-
SHA1
175d4985d5667d1800df0d296a1710df399683c8
-
SHA256
ab6d706801e34aa285ca6f4b1a370161ddabc1d477503d4bbb31ac75975a0c1b
-
SHA512
c8ff35445ce2b956da6bf0c6e3297d626a6d66336d52ae0dee30304a8c09022d2fc018532d24a0087ed0837888b6ce3dc1010b14d0d202f1560dcf0e6b198438
-
SSDEEP
1536:1u+nA4KoI5J6g4snodql+ky2Ws1b8m0ZS2FtY1/fNv/MBnCH:w+A41EJ6gJoq7yoR8miv2fNv0C
Malware Config
Signatures
Files
-
ab6d706801e34aa285ca6f4b1a370161ddabc1d477503d4bbb31ac75975a0c1b.exe windows x86
23f2cb49538bd7535b12c4ad40acbffd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantInit
VariantClear
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
LCMapStringA
GetCPInfo
VirtualAlloc
ReadFile
SetEndOfFile
CreateFileA
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
GetSystemDirectoryA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetEnvironmentStrings
GetACP
GetOEMCP
MultiByteToWideChar
SetHandleCount
LCMapStringW
HeapFree
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapCreate
GetEnvironmentStringsW
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeA
RtlUnwind
SetFilePointer
GetStringTypeW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE