Static task
static1
Behavioral task
behavioral1
Sample
ad9e06e648b7b9b1fc83a47228ae9cf0b03e99e42cc08145afba64f8805ea2af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad9e06e648b7b9b1fc83a47228ae9cf0b03e99e42cc08145afba64f8805ea2af.exe
Resource
win10v2004-20220812-en
General
-
Target
ad9e06e648b7b9b1fc83a47228ae9cf0b03e99e42cc08145afba64f8805ea2af
-
Size
310KB
-
MD5
20e2f8c467ed6494d9d8b761cbf22b73
-
SHA1
592337eb52232af6e89a59d84732a040d80b7fbe
-
SHA256
ad9e06e648b7b9b1fc83a47228ae9cf0b03e99e42cc08145afba64f8805ea2af
-
SHA512
739cdcff380fec81c75b7638b1ae46b96d1d003315d4b95416fbd1562f72a9d5c1a15781681db9673b51e73166edb6de45b3c327989a6ed881393f91b0450be7
-
SSDEEP
6144:8lT4RgdWWEyKaIUhu71Wk/u8QN/rAL01a9mM6WAUep5UauhNehxO:iTp1EbUQRWkW9N/rAIEwMjDQUaNi
Malware Config
Signatures
Files
-
ad9e06e648b7b9b1fc83a47228ae9cf0b03e99e42cc08145afba64f8805ea2af.exe windows x86
66fe771646c856eeedf4d6deee606f9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
Sleep
EnterCriticalSection
FileTimeToLocalFileTime
HeapCreate
LockResource
InterlockedExchange
GetLastError
RaiseException
VirtualProtect
GlobalAddAtomA
CloseHandle
LoadLibraryExA
GetACP
SetConsoleOutputCP
GetLocaleInfoA
GlobalDeleteAtom
GetDriveTypeA
GetStdHandle
GlobalFree
GlobalUnlock
user32
GetFocus
EndPaint
DrawEdge
GetMenuItemInfoA
IsIconic
GetActiveWindow
ValidateRect
GetWindow
GetWindowTextA
ReleaseDC
GetCursorPos
SetForegroundWindow
ShowWindow
GetClassNameA
GetParent
ClipCursor
OemToCharW
DrawTextA
BeginPaint
wtsapi32
WTSCloseServer
WTSFreeMemory
WTSOpenServerA
WTSLogoffSession
WTSQueryUserToken
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ