Static task
static1
Behavioral task
behavioral1
Sample
ac91478b9bce26d8a4fc736116d711082b7969b40bbd70631d776c10ad91ce1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac91478b9bce26d8a4fc736116d711082b7969b40bbd70631d776c10ad91ce1f.exe
Resource
win10v2004-20221111-en
General
-
Target
ac91478b9bce26d8a4fc736116d711082b7969b40bbd70631d776c10ad91ce1f
-
Size
346KB
-
MD5
d1fed2c2b0a8b6e97f896835138241d2
-
SHA1
1cc9f33ca6ae0bc29263466d0a2f555c2916c3af
-
SHA256
ac91478b9bce26d8a4fc736116d711082b7969b40bbd70631d776c10ad91ce1f
-
SHA512
0db39ab6db79c35c15cc8599d075e26fe81f7aa87b889daffb1f72631e9d2aecf7a26cb8a0cf831c76a67f8d31031aac53398aa7800bbe84b144fe78929b3d38
-
SSDEEP
6144:2BmJZzWUPYi7t0iCTAjas5qHFkbiFIhKsLAC:2YZay7t0bTAZ5ql88Ib7
Malware Config
Signatures
Files
-
ac91478b9bce26d8a4fc736116d711082b7969b40bbd70631d776c10ad91ce1f.exe windows x86
cddb1ba304de3fd640197ef6a2449b02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc71u
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3327
ord566
ord757
ord6086
ord593
ord5221
ord5113
ord334
ord956
ord547
ord4025
ord5971
ord1049
ord1117
ord1121
ord3824
ord5178
ord4206
ord4729
ord4884
ord4574
ord2011
ord1662
ord1661
ord1542
ord5908
ord1611
ord1608
ord3940
ord1392
ord4238
ord5148
ord1899
ord5067
ord6271
ord4179
ord5199
ord3397
ord4716
ord4276
ord1591
ord5956
ord5231
ord5229
ord920
ord925
ord929
ord927
ord931
ord2384
ord2404
ord2388
ord2394
ord2392
ord2390
ord2407
ord2402
ord2386
ord2409
ord2397
ord2379
ord2381
ord2399
ord2169
ord2163
ord1513
ord6273
ord3796
ord6275
ord3339
ord4961
ord1353
ord5171
ord1955
ord1647
ord1646
ord1590
ord5196
ord2856
ord4480
ord4256
ord3176
ord354
ord605
ord764
ord762
ord3642
ord3460
ord629
ord577
ord1430
ord5319
ord2897
ord383
ord2237
ord1904
ord2725
ord5003
ord5006
ord4129
ord2933
ord4898
ord940
ord5352
ord2986
ord2419
ord2418
ord4013
ord1548
ord5911
ord3939
ord1393
ord5144
ord5201
ord2164
ord1297
ord4271
ord4259
ord742
ord740
ord635
ord562
ord553
ord552
ord395
ord751
ord1994
ord2136
ord2135
ord5855
ord4293
ord5161
ord1047
ord3070
ord3395
ord4109
ord4035
ord3639
ord3444
ord4560
ord2608
ord2615
ord6234
ord2007
ord2042
ord5152
ord5588
ord1370
ord5408
ord2736
ord5491
ord4251
ord4846
ord4733
ord1913
ord4216
ord3034
ord2762
ord5930
ord6039
ord4476
ord4258
ord368
ord616
ord4699
ord3646
ord3484
ord2084
ord4438
ord4437
ord4784
ord4198
ord4775
ord4381
ord4974
ord4166
ord4175
ord4771
ord4380
ord4395
ord4393
ord4375
ord4378
ord4373
ord4858
ord4855
ord3968
ord4233
ord5147
ord5210
ord3338
ord1352
ord4267
ord5163
ord4585
ord1894
ord2953
ord3225
ord340
ord596
ord3675
ord3582
ord5169
ord2982
ord3323
ord1198
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord3677
ord4461
ord4463
ord2609
ord3635
ord1079
msvcr71
_controlfp
__security_error_handler
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
_cexit
_XcptFilter
__CxxFrameHandler
exit
malloc
memset
_except_handler3
_exit
_c_exit
free
kernel32
Sleep
Process32FirstW
GetModuleFileNameW
CreateFileA
GetModuleFileNameA
InitializeCriticalSection
GetModuleHandleA
GetStartupInfoW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteCriticalSection
CloseHandle
GetVersionExA
GetLastError
user32
SendMessageW
GetCursorPos
MessageBoxW
EnableWindow
UpdateWindow
GetForegroundWindow
advapi32
RegCloseKey
comctl32
ord17
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ