Static task
static1
Behavioral task
behavioral1
Sample
92abadc5ed37915d2a449672e275c6d883e326eb04f02c1245267e8979cc7b40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92abadc5ed37915d2a449672e275c6d883e326eb04f02c1245267e8979cc7b40.exe
Resource
win10v2004-20221111-en
General
-
Target
92abadc5ed37915d2a449672e275c6d883e326eb04f02c1245267e8979cc7b40
-
Size
108KB
-
MD5
9c94fb97b39c6f600146e516932d96f7
-
SHA1
350b86f6a575653bce030c8c8903931dbad97a6f
-
SHA256
92abadc5ed37915d2a449672e275c6d883e326eb04f02c1245267e8979cc7b40
-
SHA512
dbdd3872267edd089f785dfb4c132d7f8efb024f629ea04594444c907a852634a158ec0b9662474f3e9c08facf6303fed13acecd7a116fd3783e5ebefbab3155
-
SSDEEP
1536:T/6RkbBLjfyelJ2OT8z3dNttttttNGNlsZ2xRDF:L+kVLDywJ2OT8z3dNttttttGSiRJ
Malware Config
Signatures
Files
-
92abadc5ed37915d2a449672e275c6d883e326eb04f02c1245267e8979cc7b40.exe windows x86
84971e133388f2a39abcaaa1a382cf7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetCommandLineA
CreateFileMappingW
TlsAlloc
IsBadStringPtrW
HeapCreate
DeviceIoControl
PulseEvent
GetStartupInfoA
lstrlenA
DeleteFileA
GetDriveTypeA
CloseHandle
CloseHandle
HeapDestroy
GetModuleHandleA
GetModuleFileNameW
Sleep
CreateFileA
ReleaseMutex
user32
DestroyWindow
CallWindowProcW
FindWindowW
IsZoomed
DrawTextW
LoadImageA
DispatchMessageA
DispatchMessageA
IsWindow
PeekMessageA
GetWindowLongA
GetIconInfo
DestroyMenu
colbact
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
cryptui
CryptUIDlgCertMgr
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yimbbue Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE