Static task
static1
Behavioral task
behavioral1
Sample
adef0081524626860b72a89651506d04772e676ce50d99478df9b723f3449eff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adef0081524626860b72a89651506d04772e676ce50d99478df9b723f3449eff.exe
Resource
win10v2004-20220812-en
General
-
Target
adef0081524626860b72a89651506d04772e676ce50d99478df9b723f3449eff
-
Size
1.5MB
-
MD5
0b197fcb9449eb0f51e61940aad34593
-
SHA1
e5c781b7f2e33f2b02b72888b174b4cda4b5a313
-
SHA256
adef0081524626860b72a89651506d04772e676ce50d99478df9b723f3449eff
-
SHA512
cc78c15c8a0d7829279af13f2663305ae1e2a3cd9897df4a82ab1ff71a427c0b48d04e1d7c92819adbc59ed7d78e557b97686e1852e5e060fd1c14321d806692
-
SSDEEP
24576:IU60tla1iGXawiFRgSGWyH31Vz/XRYwR0WUIZx1epT+FBgsAzZ1UQVY:IUttla1xiFRgSREHR9epiF74us
Malware Config
Signatures
Files
-
adef0081524626860b72a89651506d04772e676ce50d99478df9b723f3449eff.exe windows x86
8ad7fd218f1c0545c34bd69b90b773d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dbghelp
MakeSureDirectoryPathExists
psapi
GetModuleFileNameExA
user32
DrawFrameControl
gdi32
GetLayout
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegEnumValueA
shell32
SHAppBarMessage
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
ole32
OleFlushClipboard
oleaut32
SysFreeString
oledlg
ord8
gdiplus
GdipDrawImageRectI
netapi32
Netbios
oleacc
AccessibleObjectFromWindow
wininet
InternetWriteFile
imm32
ImmGetContext
Sections
.text Size: 1.5MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE