Static task
static1
Behavioral task
behavioral1
Sample
3a037abc5323b1a92f3cd9619800521d5cbad0312d57b3a0bb64b213a5d76a15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a037abc5323b1a92f3cd9619800521d5cbad0312d57b3a0bb64b213a5d76a15.exe
Resource
win10v2004-20220812-en
General
-
Target
3a037abc5323b1a92f3cd9619800521d5cbad0312d57b3a0bb64b213a5d76a15
-
Size
385KB
-
MD5
1586a71bd15d5f58cb646e2776244544
-
SHA1
32c0789c9cab83c90f1360954f38e984c91ba82d
-
SHA256
3a037abc5323b1a92f3cd9619800521d5cbad0312d57b3a0bb64b213a5d76a15
-
SHA512
b23a53cc15e666c3870c30af804e2869a5bc5bff36657f1345b44c5f641f159f6784b0cb82ec9a5fcc95616fae913f1bb3edaf1c4f656f9913732826038ed094
-
SSDEEP
6144:JwquLHwHGt4j+VC69neOSAZNIf6r4fpSiHSkqPjzMhQfDDWZ:J2HwHGty+VCt2NIfAopDSnMhQfDD
Malware Config
Signatures
Files
-
3a037abc5323b1a92f3cd9619800521d5cbad0312d57b3a0bb64b213a5d76a15.exe windows x86
c2556066af72ee172a50cb173b3bd93c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDiskFreeSpaceW
GetStringTypeW
ReadConsoleA
GetLastError
LoadLibraryA
lstrcpyW
CloseHandle
ExitProcess
GetPrivateProfileIntA
Heap32First
ReadFileEx
FindResourceW
lstrcmpA
GetCurrentDirectoryA
InterlockedIncrement
SetEnvironmentVariableA
HeapCreate
GetDiskFreeSpaceW
WaitForSingleObject
GetExitCodeProcess
InterlockedDecrement
adsldpc
ADsEnumAttributes
ADsCloseSearchHandle
ADsExecuteSearch
ADsDeleteClassDefinition
clbcatq
SetSetupSave
ComPlusMigrate
SetSetupSave
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
SetupOpen
CheckMemoryGates
version
VerFindFileA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ