Static task
static1
Behavioral task
behavioral1
Sample
ad935fca437cd3e01c940f7866b66ff480f81fc462d2dee5f1b7f38f6f54fd1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad935fca437cd3e01c940f7866b66ff480f81fc462d2dee5f1b7f38f6f54fd1b.exe
Resource
win10v2004-20220812-en
General
-
Target
ad935fca437cd3e01c940f7866b66ff480f81fc462d2dee5f1b7f38f6f54fd1b
-
Size
797KB
-
MD5
5820ac2f6bf3559ef7c27e9d8cbb3790
-
SHA1
70ca03134dc6519e83c66408e7ba8c9c56886074
-
SHA256
ad935fca437cd3e01c940f7866b66ff480f81fc462d2dee5f1b7f38f6f54fd1b
-
SHA512
1fa1835dc2af3e37de8dcdd0031031c5eb396d49fc61ff03c38c4d85776d35828ffb1908f0e18b86be7bc7a1bf6832a94345a7eb66b36b45e77ece4016ef4f44
-
SSDEEP
24576:IP6Kdx8cmd7zveAEE/cTK1/aevcLR/Tdz8pM2:Y6KdxmdHeAEAcTKZaRtbd
Malware Config
Signatures
Files
-
ad935fca437cd3e01c940f7866b66ff480f81fc462d2dee5f1b7f38f6f54fd1b.exe windows x86
53a55cb556eb2666a1327c5ef3cd23d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
IsBadWritePtr
GetProcessHeap
ResetEvent
CreateMailslotA
MapViewOfFile
VirtualProtect
RemoveDirectoryA
GetStdHandle
CreateDirectoryA
SetLastError
GetDriveTypeW
CancelIo
WriteFile
DeleteFileA
GetCommandLineA
GetLocaleInfoA
ReleaseMutex
SetLocalTime
GetFileAttributesA
HeapSize
user32
LoadCursorA
PeekMessageA
wsprintfA
GetCaretPos
GetWindowTextW
DestroyMenu
DispatchMessageA
PostMessageW
GetWindowLongW
SetCursor
SetFocus
LoadImageA
GetCapture
filemgmt
DllRegisterServer
DllUnregisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ