Static task
static1
Behavioral task
behavioral1
Sample
ad1ed370953730ad4ea4bfa517f355621d3527eb0d161e9965bf3e948d873210.exe
Resource
win7-20220901-en
General
-
Target
ad1ed370953730ad4ea4bfa517f355621d3527eb0d161e9965bf3e948d873210
-
Size
2.1MB
-
MD5
c0c7f3b496eff99d9500a9708e31b658
-
SHA1
d11c6415b05c0a0efc41cfc7581b0b9a48d20fc6
-
SHA256
ad1ed370953730ad4ea4bfa517f355621d3527eb0d161e9965bf3e948d873210
-
SHA512
40e6404f0b6db4e912d2a2339fc27122a3a6c07e769de9a8b6675d4aa1714f73e33aed22b54169fe1e3fc98f5134370227a81075050a9b6d8f2c2503ec0e7ec2
-
SSDEEP
49152:wIpIhvuoaoj8f35McsGoKZ3woGT92He6qvF88:wIpGww8v5JsOgfE+6O
Malware Config
Signatures
Files
-
ad1ed370953730ad4ea4bfa517f355621d3527eb0d161e9965bf3e948d873210.exe windows x86
eeea431e1866fc459b16fed81a707ac6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCommandLineA
HeapAlloc
HeapFree
LoadLibraryA
GetVersionExA
FreeLibrary
user32
MessageBoxA
imm32
ImmSetCompositionWindow
Sections
Size: 792KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 471KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
roumvung Size: 905KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vfwrkwuh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE