Static task
static1
Behavioral task
behavioral1
Sample
Ac.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Ac.exe
Resource
win10v2004-20230220-en
General
-
Target
Ac.exe
-
Size
9KB
-
MD5
610f7810d7babbaabeda0996c8704151
-
SHA1
5cb9e001e7aa28a588349535b84c4855d626723f
-
SHA256
5e93ee312134ef4300e3e4cc6a87c2dc3435310b8c4e72aa6adbb0389737678c
-
SHA512
4944c0c263d4b879280884aec325407424be3eed90b8be12720031ae03aa9871f96c6141a6c00437f7d9c69949237bd583e7ba50e25d215dd1dbbdca7b67f3b8
-
SSDEEP
192:rGC9IpjzE4tf8QlBjOM08R7E5pz6pzyONCYhqk:rF9IZzn18OBjrR74OMYh/
Malware Config
Signatures
Files
-
Ac.exe.exe windows x86
7037fa30789f331dfcc5a23bfc5f3796
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
NetLocalGroupAddMembers
NetUserSetInfo
vcruntime140
memset
__current_exception_context
__current_exception
_except_handler4_common
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__stdio_common_vfwprintf
__p__commode
_set_fmode
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
__p___argc
_initialize_onexit_table
_exit
_c_exit
_crt_atexit
_controlfp_s
terminate
exit
_initterm_e
_register_thread_local_exe_atexit_callback
_cexit
__p___argv
_set_app_type
_seh_filter_exe
_initterm
_get_initial_narrow_environment
_register_onexit_function
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
kernel32
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ