Static task
static1
Behavioral task
behavioral1
Sample
ab50acdc5952ccdad34ea9a169097e361bab5e32867d2c044453dab97f42737b.exe
Resource
win7-20221111-en
General
-
Target
ab50acdc5952ccdad34ea9a169097e361bab5e32867d2c044453dab97f42737b
-
Size
294KB
-
MD5
625e39ec68c86460b163bf828773f2a8
-
SHA1
97a87451bec18344d3f57fc3543064c9038a8783
-
SHA256
ab50acdc5952ccdad34ea9a169097e361bab5e32867d2c044453dab97f42737b
-
SHA512
6850ec706ba44413346c20e39cd671b626dc2e0a53bd4080e8630028ba7007d04c4fc45060ac21ac5c41d812f7e3155169f6ead4d8392a000f472b5e6b94fd8d
-
SSDEEP
6144:s3Z60x6xG2DUxWGaEgxyDpUKrP1dIPgBw9zX1wYNfSEBtWWL:EZP6xrDUMNxy9UokL9zNaEBtxL
Malware Config
Signatures
Files
-
ab50acdc5952ccdad34ea9a169097e361bab5e32867d2c044453dab97f42737b.exe windows x86
58708828d5c31968bd59859804ecde67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
MessageBoxA
Sections
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 336B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ