Static task
static1
Behavioral task
behavioral1
Sample
abdf91e5a73f3b560dde91596e606b3281cc41914c18721df7d3cb00e84b4555.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abdf91e5a73f3b560dde91596e606b3281cc41914c18721df7d3cb00e84b4555.exe
Resource
win10v2004-20220901-en
General
-
Target
abdf91e5a73f3b560dde91596e606b3281cc41914c18721df7d3cb00e84b4555
-
Size
173KB
-
MD5
fab75c83052d8a65d43f2327b5553851
-
SHA1
4009622b56d74370ea330ecc93ef40a6816cd4e6
-
SHA256
abdf91e5a73f3b560dde91596e606b3281cc41914c18721df7d3cb00e84b4555
-
SHA512
338aa1faf262d17969144d3504eeba3aa545e36019557ec17a6862cf605ef7e4a11b0cbee1679d173c531508c60d031d410410852f905b3bc2ed2307710c9791
-
SSDEEP
3072:VqlrmiJ2z+u/LdhBmLfOSdWM7EI3Mg+vR+Iqj8y78abOMhe0YvtZUYn1Gyb8gw8v:ARJ6vBmLflPEcAvR+YwOM0hvtcybTw1U
Malware Config
Signatures
Files
-
abdf91e5a73f3b560dde91596e606b3281cc41914c18721df7d3cb00e84b4555.exe windows x86
4235d6cc270ebfd3333743990e36b5a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
GetOEMCP
GetAtomNameA
SetFilePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
LCMapStringW
FindFirstFileA
GetCPInfo
IsBadCodePtr
FlushFileBuffers
GetFileAttributesA
LCMapStringA
IsBadReadPtr
UnhandledExceptionFilter
EnumResourceNamesA
FreeLibrary
SetUnhandledExceptionFilter
WriteFile
SetStdHandle
WideCharToMultiByte
GetStringTypeW
ReadFile
CreateFileA
GetThreadLocale
FreeEnvironmentStringsA
VirtualProtect
GetFullPathNameA
GetDiskFreeSpaceA
MulDiv
rpcrt4
RpcStringFreeA
shlwapi
SHCreateStreamOnFileW
SHCreateStreamOnFileEx
PathIsContentTypeA
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW
Sections
.text Size: 94KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ