Static task
static1
Behavioral task
behavioral1
Sample
ad2719d44a3b8f0300296d99305981dcd3bfda1c8bf55b11a0490217711bd50c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad2719d44a3b8f0300296d99305981dcd3bfda1c8bf55b11a0490217711bd50c.exe
Resource
win10v2004-20220812-en
General
-
Target
ad2719d44a3b8f0300296d99305981dcd3bfda1c8bf55b11a0490217711bd50c
-
Size
796KB
-
MD5
676a745eda624d897087036be77636c0
-
SHA1
59f285b2800bef8f31ca62d84b4e7ab2bfa0ea6e
-
SHA256
ad2719d44a3b8f0300296d99305981dcd3bfda1c8bf55b11a0490217711bd50c
-
SHA512
e4064822becb7b31cd8eb9d925ee90084455573d19cbe728ce7e230c3a3bda0b868e716d4d04a813aaa453198c9d3b635d979269e74ee0fa46f1e9c9e53cd3f6
-
SSDEEP
12288:jDTa6unuqG10pPLagcTvadhDlVcPa9MNruGAAwuZF841qR47nmzzt4WdXJ9a0U:WjBGu9m6dWi99AwujzmusXJs
Malware Config
Signatures
Files
-
ad2719d44a3b8f0300296d99305981dcd3bfda1c8bf55b11a0490217711bd50c.exe windows x86
7970d0d3d4629ded90271a660a990b8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleW
ReleaseMutex
GetPriorityClass
GetModuleHandleA
SetLocalTime
SetLastError
IsBadWritePtr
GetProcessHeap
GetCommandLineA
GetLocaleInfoA
CreateDirectoryA
VirtualProtect
GetStdHandle
CreatePipe
RemoveDirectoryA
DeleteFileA
ResetEvent
GetFileAttributesA
GetDriveTypeA
WriteFile
HeapSize
user32
GetCaretPos
PeekMessageA
PostMessageA
DrawIcon
SetFocus
GetWindowLongW
DispatchMessageA
GetWindowTextW
GetCapture
wsprintfA
SetCursor
LoadCursorA
DestroyMenu
els
DllGetClassObject
DllRegisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ