Static task
static1
Behavioral task
behavioral1
Sample
ac81b25eb71df788e8b52363a1200a193598eaa944d8ff29c15400f54534aeea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac81b25eb71df788e8b52363a1200a193598eaa944d8ff29c15400f54534aeea.exe
Resource
win10v2004-20220812-en
General
-
Target
ac81b25eb71df788e8b52363a1200a193598eaa944d8ff29c15400f54534aeea
-
Size
286KB
-
MD5
cd5badad23f06ba74ef5da3ade6940c2
-
SHA1
b509ba0f6812b4459ce6335025be7076dc7a2598
-
SHA256
ac81b25eb71df788e8b52363a1200a193598eaa944d8ff29c15400f54534aeea
-
SHA512
4d2788d0e35ba1bff34e3311cee516bf82bf902a86aecf6cb1c9576027cca9f10a44ebabd355938e57b63af03b34766fd6bbdaaab9979b746238d36b13d17aa0
-
SSDEEP
6144:JZUQe0w8kZqkvU+5TnGym4+0rK0pvwENdX2RtxxA0959ZSz:AmwZqkvtTGymLap+A095PSz
Malware Config
Signatures
Files
-
ac81b25eb71df788e8b52363a1200a193598eaa944d8ff29c15400f54534aeea.exe windows x86
d60bc1865af9988fc1d53235fa038fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
PathIsFileSpecA
PathIsContentTypeA
PathAppendA
SHCreateStreamOnFileEx
PathCreateFromUrlW
kernel32
GlobalHandle
FindAtomW
MultiByteToWideChar
GetOEMCP
InterlockedDecrement
GlobalFree
TlsAlloc
SetLastError
SetLastError
DeleteCriticalSection
FormatMessageW
GetCurrentProcess
InitializeCriticalSection
MulDiv
lstrlenW
TlsSetValue
RaiseException
GetLocaleInfoW
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
SetUnhandledExceptionFilter
lstrcmpW
EnumResourceNamesA
WaitForSingleObject
GetCurrentThreadId
LocalAlloc
FlushInstructionCache
GetStringTypeA
InterlockedIncrement
CloseHandle
GlobalUnlock
GetComputerNameW
InterlockedExchange
GetTickCount
GlobalAlloc
lstrlenA
GlobalLock
HeapSetInformation
TlsFree
CreateFileW
WideCharToMultiByte
oleacc
CreateStdAccessibleObject
Sections
.text Size: 146KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ