Static task
static1
Behavioral task
behavioral1
Sample
abe042e0ed7f7f5a9c8df10e54542c6d01448043d8a66777dce88bd88f866e41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abe042e0ed7f7f5a9c8df10e54542c6d01448043d8a66777dce88bd88f866e41.exe
Resource
win10v2004-20220901-en
General
-
Target
abe042e0ed7f7f5a9c8df10e54542c6d01448043d8a66777dce88bd88f866e41
-
Size
54KB
-
MD5
6bfefa07f4bed76067841096052ec0fe
-
SHA1
cf210d05faf83d7b19548004c4ac194bd5fac1fd
-
SHA256
abe042e0ed7f7f5a9c8df10e54542c6d01448043d8a66777dce88bd88f866e41
-
SHA512
059b009881cd5ddc25c103df86479e033343096b3dc0575ad063c15457f34a41481694a7fed8472ec7a9bcc26907af76a6a8531b80bbfd415c79eaffb2450d7a
-
SSDEEP
768:u4XK4zSHbwq2dLVSgJHx/ug63ZU4ne/baJi/JMG3B7gw+6C7tNATCgdnWsLAePao:lzGw3wgBxUbYbvBxc6JTTWsLXao
Malware Config
Signatures
Files
-
abe042e0ed7f7f5a9c8df10e54542c6d01448043d8a66777dce88bd88f866e41.exe windows x86
b4bbb0ce3378780042f166e05c3fa413
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowThreadProcessId
IsDialogMessageA
TrackPopupMenuEx
TranslateAcceleratorA
PeekMessageA
GetSubMenu
EnumWindows
DrawTextA
kernel32
RtlUnwind
SetLastError
SetConsoleCtrlHandler
SearchPathA
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
IsValidCodePage
CloseHandle
ExitProcess
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetNumberFormatA
GetProcessAffinityMask
GetStartupInfoA
GetVersionExA
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
lstrcatA
setupapi
SetupGetSourceFileLocationW
SetupDiGetHwProfileFriendlyNameExW
SetupDiSetDeviceInstallParamsW
SetupDiGetActualSectionToInstallExA
olepro32
OleCreateFontIndirect
advapi32
CryptHashSessionKey
ElfOpenEventLogA
QueryAllTracesA
AddAuditAccessAceEx
security
ImportSecurityContextA
FreeContextBuffer
EnumerateSecurityPackagesW
InitializeSecurityContextA
MakeSignature
AcquireCredentialsHandleW
QueryContextAttributesW
oleacc
CreateStdAccessibleProxyA
AccessibleObjectFromWindow
Sections
.text Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ