Static task
static1
Behavioral task
behavioral1
Sample
add1a061b92b24711d4f0dff818f1711ed357ca16da26d41418cf1a136fae6cf.exe
Resource
win10v2004-20220901-en
General
-
Target
add1a061b92b24711d4f0dff818f1711ed357ca16da26d41418cf1a136fae6cf
-
Size
281KB
-
MD5
a6cbb656de48c769c0875d17ed596e6e
-
SHA1
63f26cb9f0c260f209910f3f507a4601e5f0d4db
-
SHA256
add1a061b92b24711d4f0dff818f1711ed357ca16da26d41418cf1a136fae6cf
-
SHA512
f08e8bb92b850a43f1b74514c9d639d136abbee1f5088f8aaa9a89a5e6a9674b731fb427cfe408f450237d4f031240d92ea77c88fbbb82ddd1c951b44dfe5cf3
-
SSDEEP
3072:1PBlorgLl8xt2XbQ3QVLoFWXOLN7/AeCelnCOIg4Jeb7:NLlI4MQVLoFEON/BCGIZg
Malware Config
Signatures
Files
-
add1a061b92b24711d4f0dff818f1711ed357ca16da26d41418cf1a136fae6cf.exe windows x86
b0a16631cf6b80d1aaf105b20b72b5bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringW
SetWaitableTimer
WaitNamedPipeW
CommConfigDialogA
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesW
GetCPInfoExA
EnumResourceTypesA
GetModuleFileNameW
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthW
DeleteFileA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
VirtualAlloc
LoadLibraryW
ReleaseActCtx
GetConsoleAliasW
WritePrivateProfileStringW
EnumResourceNamesA
LocalFileTimeToFileTime
LocalReAlloc
lstrcpynA
AddAtomW
FreeConsole
GetLastError
GetThreadLocale
GetSystemDefaultLCID
VirtualProtect
GetComputerNameExW
FindNextFileW
GetPriorityClass
ScrollConsoleScreenBufferA
OpenJobObjectA
InitializeCriticalSection
FindResourceExW
SetConsoleMode
_lclose
GlobalUnWire
GetComputerNameA
VerifyVersionInfoW
IsDBCSLeadByte
SetFileShortNameW
GetFileAttributesExA
GetVolumePathNameA
GetModuleHandleA
GetStringTypeA
FindFirstChangeNotificationW
Sleep
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
GetStartupInfoW
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeW
gdi32
GetCharWidth32A
GetFontUnicodeRanges
advapi32
CloseEventLog
GetOldestEventLogRecord
ReportEventW
ole32
CoRegisterMallocSpy
winhttp
WinHttpReadData
WinHttpOpen
WinHttpSetTimeouts
msimg32
TransparentBlt
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 199KB - Virtual size: 39.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ