Static task
static1
Behavioral task
behavioral1
Sample
ad518a8904fb860f1970971af739bdb7711759e0624c99161468d9863264eb3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad518a8904fb860f1970971af739bdb7711759e0624c99161468d9863264eb3c.exe
Resource
win10v2004-20220812-en
General
-
Target
ad518a8904fb860f1970971af739bdb7711759e0624c99161468d9863264eb3c
-
Size
306KB
-
MD5
2932fb7ff318e2b68b64b3b85d376630
-
SHA1
01f5329c17e7451caedade3eb99d361683f912bd
-
SHA256
ad518a8904fb860f1970971af739bdb7711759e0624c99161468d9863264eb3c
-
SHA512
3ef3d7074a6f62f54e446bfb027f3d7066102c7a6acd95a04bd206dabade9c63f1e967437dfd0d8e4ea9348fb03d2c8851787e4fefc9827594e8e182364bb73e
-
SSDEEP
6144:2ps7DLP7hZeLT45ZoMIqVNGdqgQotpS0HQ0WrPUMYQS2:qMPOKKMI0NGdqgQaCIM
Malware Config
Signatures
Files
-
ad518a8904fb860f1970971af739bdb7711759e0624c99161468d9863264eb3c.exe windows x86
0c99511504e96cd16d41ba3cd7b9e73c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
UnregisterClassA
gdi32
DeleteDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shlwapi
PathStripToRootA
oleaut32
VariantClear
wininet
HttpOpenRequestA
Sections
.text Size: 264KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE