Static task
static1
Behavioral task
behavioral1
Sample
ad03b6c281680f0320e63b0b2047bd0c72806fbb4d09cfa8470c205c84f5591d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad03b6c281680f0320e63b0b2047bd0c72806fbb4d09cfa8470c205c84f5591d.exe
Resource
win10v2004-20220812-en
General
-
Target
ad03b6c281680f0320e63b0b2047bd0c72806fbb4d09cfa8470c205c84f5591d
-
Size
122KB
-
MD5
456916eee3f495426c184960fdc59a60
-
SHA1
043028f49be52cd08ff80c3b80ecd4d9cfdf78bf
-
SHA256
ad03b6c281680f0320e63b0b2047bd0c72806fbb4d09cfa8470c205c84f5591d
-
SHA512
8540eb4300455ac133062a8e33a133f97ace3c5a7b9933b81d89b8a9f3121c935afbfa35c4ede8b154f370988722d20347602fc014d71de7629e76ad36f99850
-
SSDEEP
3072:kQ2ct5Ou4X4f9H4Mq6H23ordFNDPBrXhHJn/:wX8Hhq6H2YrdlXhHJ/
Malware Config
Signatures
Files
-
ad03b6c281680f0320e63b0b2047bd0c72806fbb4d09cfa8470c205c84f5591d.exe windows x86
9c882ac078a70e42ba09e71e7742bbdf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLogicalDrives
ReadConsoleA
VirtualProtectEx
FindAtomW
HeapSize
lstrlenA
PulseEvent
GetStringTypeW
CloseHandle
SearchPathA
GetDriveTypeA
ReadConsoleA
TlsGetValue
Sleep
DeleteFileW
GetPrivateProfileSectionA
ReadConsoleA
GetStartupInfoA
GetLastError
LoadLibraryW
ReleaseMutex
uxtheme
GetThemeTextMetrics
GetWindowTheme
SetWindowTheme
CloseThemeData
GetThemeBool
DrawThemeBackground
CloseThemeData
IsThemeActive
DrawThemeEdge
OpenThemeData
GetThemeTextExtent
GetThemeSysSize
GetThemeColor
gpedit
ExportRSoPData
BrowseForGPO
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE