Static task
static1
Behavioral task
behavioral1
Sample
ad6c95565255a3a097cc12c558c9397fa38b97d6a37cc80256daea04023292b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad6c95565255a3a097cc12c558c9397fa38b97d6a37cc80256daea04023292b8.exe
Resource
win10v2004-20220812-en
General
-
Target
ad6c95565255a3a097cc12c558c9397fa38b97d6a37cc80256daea04023292b8
-
Size
300KB
-
MD5
610f242780e2abcdb0f3be08973f34f0
-
SHA1
c20cdba827d6e26328de0188751adc6f9b7d31dc
-
SHA256
ad6c95565255a3a097cc12c558c9397fa38b97d6a37cc80256daea04023292b8
-
SHA512
abc70993c7f318db5a7a22980d4b37d1656cfce4d62741dd58789e4c24a0e6e0370716d4cff079e467af43ee1ac75ed55f24bc11965cde732af85bd8f9015931
-
SSDEEP
6144:8PWnh7+AZ/KuGmU0xROflRxVUrbEABa49BZzorBO:3hyAMui68jVYbEAs49Dzork
Malware Config
Signatures
Files
-
ad6c95565255a3a097cc12c558c9397fa38b97d6a37cc80256daea04023292b8.exe windows x86
463dedae1d2740b805332b40aad7d4cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMailslotW
GetLocaleInfoA
GetProcessHeap
CreateDirectoryA
IsBadWritePtr
MapViewOfFile
GetExitCodeThread
FindResourceA
GetFileAttributesA
SetLastError
ResetEvent
FindClose
GetStdHandle
ReleaseMutex
HeapSize
RemoveDirectoryA
GetModuleHandleA
VirtualProtect
CancelIo
GetDriveTypeW
GetCommandLineA
user32
IsDialogMessageA
PeekMessageA
DispatchMessageA
LoadImageW
LoadCursorA
SetFocus
SetCursor
wsprintfA
GetWindowTextW
PostMessageW
GetWindowLongW
DestroyMenu
GetCapture
ipsmsnap
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ