Static task
static1
Behavioral task
behavioral1
Sample
aadf14bf4c94531578373f626dcf173d5e6ebc05b5e97e1da7c4044c461ee0fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aadf14bf4c94531578373f626dcf173d5e6ebc05b5e97e1da7c4044c461ee0fe.exe
Resource
win10v2004-20220812-en
General
-
Target
aadf14bf4c94531578373f626dcf173d5e6ebc05b5e97e1da7c4044c461ee0fe
-
Size
747KB
-
MD5
45635abd19eacd01ec1eb0ecc9ab3e94
-
SHA1
9337cc457a6162759e1eeec572d929720f211b4a
-
SHA256
aadf14bf4c94531578373f626dcf173d5e6ebc05b5e97e1da7c4044c461ee0fe
-
SHA512
2c8339cbeb31335eb3a6eb5501249209dede25206ec5d3b2722f985c52e4d763a6731507e696211611c7a44be2d07d0c8f825d8cdedb585a49992bb6344e588f
-
SSDEEP
12288:RU7TppGkxH7LN2tP/E418B5o6dFtPYrbOIuljs3u+UG51v1Nl9EPEYQZ8I:YSkxH752tPO5o65PY3OIPe1G5B1NlSET
Malware Config
Signatures
Files
-
aadf14bf4c94531578373f626dcf173d5e6ebc05b5e97e1da7c4044c461ee0fe.exe windows x86
115244c585cc5d4fc1f2d0cfe7231dfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileAttributesW
lstrlenA
GetModuleHandleA
GetDriveTypeW
HeapCreate
HeapDestroy
GetStartupInfoA
CreateSemaphoreA
SetLastError
GetCommandLineA
EnumResourceTypesA
GlobalFlags
GetCommandLineA
CloseHandle
WriteConsoleA
GetConsoleTitleW
CreateEventW
GetEnvironmentVariableA
DeleteFileA
advapi32
IsValidSid
IsValidSid
RegDeleteValueA
RegCreateKeyExW
IsValidSid
RegQueryValueW
CloseEventLog
IsValidSid
RegEnumKeyA
CreateProcessAsUserW
IsValidSid
IsValidAcl
InitializeSid
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ