Static task
static1
Behavioral task
behavioral1
Sample
abe93ea2930afdd24b7184a4d7c3d4edaced0dd0a8b493384ad9b14fbb1cbbd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abe93ea2930afdd24b7184a4d7c3d4edaced0dd0a8b493384ad9b14fbb1cbbd8.exe
Resource
win10v2004-20220812-en
General
-
Target
abe93ea2930afdd24b7184a4d7c3d4edaced0dd0a8b493384ad9b14fbb1cbbd8
-
Size
31KB
-
MD5
571cea2aae224eee79b61ae0fcb052c5
-
SHA1
79b793207b6602b5d6da99d0e05c9f9eb1ecf76a
-
SHA256
abe93ea2930afdd24b7184a4d7c3d4edaced0dd0a8b493384ad9b14fbb1cbbd8
-
SHA512
598a98428ddd8ff9ab63cde756cca18de488803d413b381b4a59b439908c0bee951e6f6d9cfbc26ebd036b2450b6e60ffd6e63abad22a863519cd99491d26aca
-
SSDEEP
768:HtAnn0bQhomcPnf3/O4BlZ/ghWU5wGbClGf:HinNUnfPO4BL4lLu
Malware Config
Signatures
Files
-
abe93ea2930afdd24b7184a4d7c3d4edaced0dd0a8b493384ad9b14fbb1cbbd8.exe windows x86
ff5ca5fbc641c8868fa081982fbdc6c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
LoadLibraryA
ReadFile
SetEndOfFile
SetEvent
Sleep
VirtualAlloc
ExitThread
WaitForSingleObject
GetCurrentProcessId
GetCommandLineA
GetSystemTimeAsFileTime
GetSystemDirectoryW
CreateFileW
FreeLibrary
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
HeapFree
HeapCreate
HeapAlloc
ExitProcess
DeleteFileA
CreateThread
CreateFileA
CreateEventA
WriteFile
GetCurrentDirectoryA
CopyFileA
VirtualFree
CloseHandle
msvcrt
calloc
memcpy
malloc
_errno
strlen
strcat
free
wcscat
memcmp
memset
_except_handler3
_time64
_localtime64
memmove
_stricmp
imagehlp
CheckSumMappedFile
advapi32
CryptEncrypt
CryptReleaseContext
CryptDecrypt
CryptSetKeyParam
CryptImportKey
CryptAcquireContextA
CryptDestroyKey
Sections
.text Size: 25KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE