Static task
static1
Behavioral task
behavioral1
Sample
abd93abba72d20ee49f2652b7c2af688f9156306269b7f937524a573ec5654ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abd93abba72d20ee49f2652b7c2af688f9156306269b7f937524a573ec5654ff.exe
Resource
win10v2004-20221111-en
General
-
Target
abd93abba72d20ee49f2652b7c2af688f9156306269b7f937524a573ec5654ff
-
Size
116KB
-
MD5
dabaf67e1df3617af843f57bbd42a352
-
SHA1
2354db2ddcfdd257375c389a0802e55cf77a3374
-
SHA256
abd93abba72d20ee49f2652b7c2af688f9156306269b7f937524a573ec5654ff
-
SHA512
533009bf54631ac59617809550a331ca1216b47b8a4d775fb97e4e7a1f1dd190fec25e393ca7e2d75418333931ac61c26482ebb866c2a64d7803ceddd07a446c
-
SSDEEP
3072:M0JXvNoKBC5CH+xF7vCww95YeoLoSqtIzp:R3BC564ubYe5t
Malware Config
Signatures
Files
-
abd93abba72d20ee49f2652b7c2af688f9156306269b7f937524a573ec5654ff.exe windows x86
b84659e0d2fc20cccca514767ecfe6eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
GetStartupInfoA
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetCommandLineA
InterlockedDecrement
lstrlenA
GetPrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
FindClose
FindFirstFileA
GetModuleFileNameA
lstrcatA
lstrcpyA
GetProcAddress
shell32
SHGetFolderPathA
wininet
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memmove
??3@YAXPAX@Z
_mbsstr
strchr
strrchr
_snprintf
sprintf
localtime
time
__CxxFrameHandler
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
shlwapi
PathRemoveFileSpecA
PathAddBackslashA
SHGetValueA
StrStrIA
PathAppendA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
[Gc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE