Static task
static1
Behavioral task
behavioral1
Sample
abdbba2bb55077413c24270c8d3d62ac28a0e10bbdf9692b0e37798b64b724d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abdbba2bb55077413c24270c8d3d62ac28a0e10bbdf9692b0e37798b64b724d0.exe
Resource
win10v2004-20220901-en
General
-
Target
abdbba2bb55077413c24270c8d3d62ac28a0e10bbdf9692b0e37798b64b724d0
-
Size
138KB
-
MD5
2a5d737ff611b70b7afa0f50bd93d412
-
SHA1
3d43fc73db2b1677059cc9bafddfd4e420affe2b
-
SHA256
abdbba2bb55077413c24270c8d3d62ac28a0e10bbdf9692b0e37798b64b724d0
-
SHA512
4c5d41169c73c7ab08a8dd2a63323ddb4ac6b65d1b0f20240cfe78d41d3fc7a6c4157f5ff6d86d6cd1ae6ccbebebdd9e191c105961b386ffd86e59cb0017be98
-
SSDEEP
3072:mnSNJa7n/VdpMmusBY1uMng1R7uV9FBnUxuJrTdkzGn0+AGGPY/T:mOQ/VdcsYa1R7+FxUxuKG0hDPe
Malware Config
Signatures
Files
-
abdbba2bb55077413c24270c8d3d62ac28a0e10bbdf9692b0e37798b64b724d0.exe windows x86
f7176bb81943e0bc4f5da798f677df23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetSystemDefaultLangID
GetLogicalDrives
GetCurrentThread
GetModuleFileNameA
TlsAlloc
TlsGetValue
TlsFree
IsValidCodePage
GetCommandLineA
GetCurrentThreadId
GetDriveTypeA
GetThreadPriority
CloseHandle
Sleep
GetStartupInfoA
FreeLibrary
GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
TlsSetValue
user32
GetClassLongA
OpenIcon
GetDC
GetWindow
GetWindowTextA
UpdateWindow
GetFocus
GetWindowLongA
GetSystemMetrics
RegisterClassA
GetForegroundWindow
ShowWindow
CreateWindowExA
BeginPaint
GetWindowDC
GetWindowTextLengthA
IsWindowVisible
ReleaseDC
GetActiveWindow
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
IsTextUnicode
RegCloseKey
GetUserNameA
version
GetFileVersionInfoSizeA
VerLanguageNameA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE