Static task
static1
Behavioral task
behavioral1
Sample
adcbede09da13c2aa1e14aa9bb91817c.exe
Resource
win7-20220414-en
General
-
Target
adcbede09da13c2aa1e14aa9bb91817c
-
Size
310KB
-
MD5
adcbede09da13c2aa1e14aa9bb91817c
-
SHA1
63645ff0957d234eaec0141922208c70181cd70a
-
SHA256
31a8918d1ea465e8130afd39e4ff6335692756ffde95a840aff0bc0a7565cdf2
-
SHA512
929d124db01e627293248ffa4c242c9e4c769242e1db4ff76b422b23cee7d5dafc9dceb77c63338884967a4fbdcb986d93a9444da3b96b6b87953aa9f8422402
-
SSDEEP
6144:BbdPkhuYoYtyvdkN6bRxkZozdK3UHWJiaiMtKGQqN7VAFm+yBq:V1coiEqQbR+ZozdK3UHWJZtVn
Malware Config
Signatures
Files
-
adcbede09da13c2aa1e14aa9bb91817c.exe windows x86
c73697b3ffad4f64cc9debef9347341e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
GetConsoleAliasExesLengthW
GetNamedPipeHandleStateW
GetQueuedCompletionStatus
FillConsoleOutputCharacterW
EnumSystemCodePagesW
LocalSize
GetVolumeNameForVolumeMountPointA
WriteConsoleInputA
EnumDateFormatsW
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsW
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
UnlockFile
GetProfileSectionA
VerifyVersionInfoW
IsSystemResumeAutomatic
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileW
FindNextVolumeMountPointW
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
GetShortPathNameW
ReleaseActCtx
GetCommandLineA
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
GetModuleFileNameW
EnterCriticalSection
FindNextVolumeW
GetExitCodeThread
LoadLibraryA
CreateNamedPipeW
GetUserDefaultLCID
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
HeapSize
_hread
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntA
GetConsoleAliasExesLengthA
DebugBreak
EndUpdateResourceA
GetTickCount
OpenFileMappingA
GetDefaultCommConfigA
VirtualAlloc
TerminateThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
GlobalGetAtomNameA
IsProcessInJob
MoveFileA
lstrcpynA
WriteConsoleW
GetProcAddress
lstrcatA
WriteConsoleOutputA
SetHandleInformation
GetPrivateProfileStringA
GetComputerNameW
CreatePipe
WritePrivateProfileSectionA
WritePrivateProfileStructW
GetPrivateProfileSectionNamesW
GetDriveTypeA
GetFileAttributesA
CopyFileA
GetComputerNameExA
GlobalMemoryStatus
SetTapeParameters
lstrcmpW
ResetEvent
MoveFileW
FreeLibrary
GetCommState
InterlockedExchangeAdd
DeleteFiber
EnumDateFormatsA
SetVolumeMountPointA
GetOverlappedResult
LocalAlloc
SetThreadPriorityBoost
SetFileShortNameW
GetFileAttributesW
SetCalendarInfoA
ConvertFiberToThread
SetComputerNameA
GetConsoleAliasesA
EnumDateFormatsExW
GetTimeZoneInformation
GetConsoleOutputCP
MoveFileWithProgressA
GetStdHandle
SetLocalTime
GetStringTypeW
EnumSystemLocalesA
GetConsoleAliasesLengthW
CreateMemoryResourceNotification
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
GetCurrentActCtx
SetFileTime
GetFileType
GetNamedPipeHandleStateA
UnhandledExceptionFilter
SetProcessShutdownParameters
lstrcpynW
GlobalUnWire
FillConsoleOutputCharacterA
GetCompressedFileSizeA
GetFullPathNameA
ReadConsoleA
MapUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectA
CreateFileW
SetTimerQueueTimer
GetFileInformationByHandle
SetUnhandledExceptionFilter
GetLastError
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
IsDebuggerPresent
SetFilePointer
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
FlushFileBuffers
WriteConsoleA
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
CreateFileA
CloseHandle
ReadFile
DeleteFileA
user32
CharUpperA
winhttp
WinHttpWriteData
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ