Static task
static1
Behavioral task
behavioral1
Sample
ab96de299dc99c0e031f627906815578155d55c279fa94637fd85dc6be8d4c07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab96de299dc99c0e031f627906815578155d55c279fa94637fd85dc6be8d4c07.exe
Resource
win10v2004-20220812-en
General
-
Target
ab96de299dc99c0e031f627906815578155d55c279fa94637fd85dc6be8d4c07
-
Size
638KB
-
MD5
4e86494bb8e24b9ba62f2758522008fa
-
SHA1
3cea02a1fdcc876465a98c981f1b8c03ef125029
-
SHA256
ab96de299dc99c0e031f627906815578155d55c279fa94637fd85dc6be8d4c07
-
SHA512
eb39e746aa23954e1ab3230aefb4b36917ceba2200df6ae1fece7a30a53045a078fa9dfd92196787639be4911559dbad9704d2ae6f8707e3e9c04e545eac9d30
-
SSDEEP
12288:+2au1U9n70GBl0tfyb2UlCjmlc+xjzZt7Rt8tC4IvSWMPOsoX1UKNGW6:/auSR5B6tf22kCj2xvjdt88X5s+1eW6
Malware Config
Signatures
Files
-
ab96de299dc99c0e031f627906815578155d55c279fa94637fd85dc6be8d4c07.exe windows x86
37805faf4703d02c1315cfef6e2b5423
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
WaitForMultipleObjects
GetStdHandle
GetCommandLineA
TlsFree
VirtualProtect
AddAtomA
lstrlenA
GetTickCount
GlobalUnlock
GetModuleHandleA
InterlockedExchange
HeapReAlloc
HeapCreate
GetProfileIntA
WaitForSingleObject
GetVersion
GetConsoleCP
CompareFileTime
LoadLibraryExA
CloseHandle
user32
UpdateWindow
EnableScrollBar
EqualRect
FindWindowA
CreateCaret
GetKeyState
CreateCursor
CopyRect
SetPropA
ModifyMenuA
ShowWindow
DispatchMessageA
SubtractRect
TranslateMessage
PaintDesktop
SetWindowPos
PostMessageA
GetDlgItem
GetMenuStringA
MessageBoxA
GetKeyboardLayout
GetWindowTextA
InsertMenuA
DialogBoxParamA
DestroyMenu
atl
AtlGetVersion
AtlSetErrorInfo
AtlModuleInit
AtlAdvise
AtlUnadvise
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ