Static task
static1
Behavioral task
behavioral1
Sample
ab6a767e1c52b69ed14102dc664f7496322796add2b9dacbb3ea84045a2934a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab6a767e1c52b69ed14102dc664f7496322796add2b9dacbb3ea84045a2934a7.exe
Resource
win10v2004-20220812-en
General
-
Target
ab6a767e1c52b69ed14102dc664f7496322796add2b9dacbb3ea84045a2934a7
-
Size
126KB
-
MD5
91e5bf64c9c8c4332cf188efb7de80d0
-
SHA1
fb8562f2a8d84b6e0c411c381fe64383f6a7e475
-
SHA256
ab6a767e1c52b69ed14102dc664f7496322796add2b9dacbb3ea84045a2934a7
-
SHA512
0749c89d0cfe91f6c7c474aed05f16b7f41cbfffda4e5f3408c490e11d9c4da741a458b8d91f95f574c252cbeb502ba8d833d0731e59ab744aacfb4001314895
-
SSDEEP
3072:8dwEcppl69FPQpNPQ6//sdFLvQeiN32++6xU+fh370k3hdAf:imppl69Q//sGF+Kp170k3hY
Malware Config
Signatures
Files
-
ab6a767e1c52b69ed14102dc664f7496322796add2b9dacbb3ea84045a2934a7.exe windows x86
da464ac6fe6de6aff314acd64890aa15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
CreateFileA
LoadResource
GetTickCount
FreeLibrary
LoadLibraryA
CreateThread
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetProcAddress
OutputDebugStringA
user32
LoadCursorA
SetCursor
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
shell32
SHFileOperationA
SHGetSpecialFolderPathA
msvcrt
_controlfp
_except_handler3
__set_app_type
strcmp
printf
memset
sprintf
memcpy
strlen
fclose
fwrite
fopen
strcat
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strcmpi
shlwapi
PathFileExistsA
setupapi
SetupDiGetClassDevsA
SetupDiOpenClassRegKey
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ