Static task
static1
Behavioral task
behavioral1
Sample
ad0a8b372eca2aa821062e773ef93e9d4bf6e33ce75d4dc22ae6552f55aafacf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad0a8b372eca2aa821062e773ef93e9d4bf6e33ce75d4dc22ae6552f55aafacf.exe
Resource
win10v2004-20220812-en
General
-
Target
ad0a8b372eca2aa821062e773ef93e9d4bf6e33ce75d4dc22ae6552f55aafacf
-
Size
387KB
-
MD5
6ce97eb214165776c94afd472e0f7060
-
SHA1
e0ce66b4654cf5e918e060d21cac5536271c2dc6
-
SHA256
ad0a8b372eca2aa821062e773ef93e9d4bf6e33ce75d4dc22ae6552f55aafacf
-
SHA512
ad725fa9a57c7bf4481a145b64f0eeb25d06cb6479fd826ddd807331b73424ee6eaa8d0efd655d096366cdec37fd0ac8b3622879ea24cc90b853320a332bdffb
-
SSDEEP
6144:WPDYpvA9DWjBaeeD5Hch4mFkzm4Q9y1IHfuji0x+mJQ0u2J2cBJX:WPDY9HdanHO4mFkzm4o0Jfuw1Z
Malware Config
Signatures
Files
-
ad0a8b372eca2aa821062e773ef93e9d4bf6e33ce75d4dc22ae6552f55aafacf.exe windows x86
2290b9a3f300ea1e90ec31fd105bd19c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
GetStringTypeW
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
WriteConsoleW
SetFilePointer
SetEndOfFile
GetProcessHeap
GetLastError
LocalFree
HeapCreate
HeapAlloc
CreateFileA
GetFileSize
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
CloseHandle
InterlockedDecrement
GetProcAddress
LoadLibraryExA
BeginUpdateResourceA
lstrlenA
GetModuleFileNameA
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
CreateFileW
GetCPInfo
RtlUnwind
Sleep
QueryPerformanceCounter
LoadLibraryA
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
ReleaseDC
SendMessageA
wsprintfA
GetWindowTextA
GetSysColor
EndPaint
GetIconInfo
IsWindowVisible
GetDesktopWindow
GetWindow
BeginDeferWindowPos
DeferWindowPos
GetWindowTextLengthA
EndDeferWindowPos
GetDialogBaseUnits
OffsetRect
MapWindowPoints
GetDC
SetActiveWindow
SetWindowTextA
GetClientRect
DrawIconEx
PostQuitMessage
DefWindowProcA
GetMenu
GetMenuItemInfoA
EnumDisplaySettingsA
MonitorFromWindow
GetMonitorInfoA
GetWindowRect
InvalidateRect
SendDlgItemMessageW
BeginPaint
gdi32
SelectObject
CreatePen
SetBkMode
TextOutA
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetObjectA
CreateFontIndirectA
GetTextMetricsA
DeleteObject
CreateICA
DeleteDC
CreateBitmapIndirect
StretchBlt
GetClipBox
SetTextColor
comdlg32
ChooseFontA
PrintDlgA
advapi32
QueryAllTracesA
ole32
CreateStreamOnHGlobal
OleInitialize
oleaut32
OleLoadPicture
VariantInit
OleSavePictureFile
version
GetFileVersionInfoW
iphlpapi
IcmpParseReplies
shlwapi
StrChrA
PathFindFileNameA
PathUnExpandEnvStringsA
PathIsUNCServerA
StrDupA
PathFindExtensionA
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ