Static task
static1
Behavioral task
behavioral1
Sample
acbb11703c88bbda56cb35dbe4e4dd8962d69b16af48fe58d77e9f9984eb72a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
acbb11703c88bbda56cb35dbe4e4dd8962d69b16af48fe58d77e9f9984eb72a2.exe
Resource
win10v2004-20220812-en
General
-
Target
acbb11703c88bbda56cb35dbe4e4dd8962d69b16af48fe58d77e9f9984eb72a2
-
Size
333KB
-
MD5
a6ccc84ae482b04a2e877dd283edd6e2
-
SHA1
e068857e761cc7262f91351c202f8b2d29bc368e
-
SHA256
acbb11703c88bbda56cb35dbe4e4dd8962d69b16af48fe58d77e9f9984eb72a2
-
SHA512
4b776804ca57fb9213f53d6194b486d89ae4ff5eb1e638aec85ca2ae9e2f6d1c72bbefa8790d146c2a695474952f51727312f0fcd2238704732ccd54e1dffa1e
-
SSDEEP
3072:1d+vFsKuwPROUV5KDy5gxGxdWKb9Joag9cBrCUwsyg5yalqu5BOJoSW+FQZLe+gR:vVyF5Ohox1b9JoazLplTMoSWp/gUte
Malware Config
Signatures
Files
-
acbb11703c88bbda56cb35dbe4e4dd8962d69b16af48fe58d77e9f9984eb72a2.exe windows x86
c3a6c854b31722b6262629f937704138
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
lstrcmpiA
GetModuleHandleA
GetLastError
GetDiskFreeSpaceA
CloseHandle
DeleteCriticalSection
CreateHardLinkA
GetTickCount
AddAtomA
VirtualProtect
HeapDestroy
SearchPathA
SetEvent
TlsGetValue
Sleep
ResumeThread
GetThreadLocale
ExitProcess
GetStartupInfoA
advapi32
IsValidSid
AccessCheck
CloseEventLog
CloseTrace
RegEnumKeyExA
FreeSid
RegLoadKeyA
LsaFreeMemory
LsaSetSecret
OpenEventLogA
GetFileSecurityA
LsaClose
RegCloseKey
RegCreateKeyExA
cfgmgr32
CM_Delete_Range
CM_First_Range
CM_Get_Child
CM_Add_IDA
CM_Add_Range
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ