Static task
static1
Behavioral task
behavioral1
Sample
ade1392988d1cb2af4b277fa5388a814ae29038daffffae40d625ce0951ac693.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ade1392988d1cb2af4b277fa5388a814ae29038daffffae40d625ce0951ac693.exe
Resource
win10v2004-20220812-en
General
-
Target
ade1392988d1cb2af4b277fa5388a814ae29038daffffae40d625ce0951ac693
-
Size
144KB
-
MD5
059b8bd68535a5278127dab74b700f30
-
SHA1
7e991ec490454d09d4b7fd78db0ae7c213710300
-
SHA256
ade1392988d1cb2af4b277fa5388a814ae29038daffffae40d625ce0951ac693
-
SHA512
a35354607f0d03dd5e4d6b717ce3f9d053ab6f6e347555d343dc15970784fedf47145ef61d827e4fbaf8383b30738ef3dcc3d3a0ecf063f3db39bc92329edd90
-
SSDEEP
1536:YrmWTIS7Sb/XwJ5c7dnnIC5tJtNTGjdpSHMxN6IhFXVWKHogKfjI5vCG0C0GQHGL:aLvEnJ4pyIhfpoguIBvPnPEkAHr8
Malware Config
Signatures
Files
-
ade1392988d1cb2af4b277fa5388a814ae29038daffffae40d625ce0951ac693.exe windows x86
ba7fe787ae866fbd264b43dd5035d59a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_close
_lseek
_open
_read
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_lseeki64
_onexit
_setmode
_winmajor
abort
atexit
calloc
fflush
fgetc
fprintf
fputs
free
fwrite
malloc
memcpy
memset
perror
signal
sprintf
strchr
strcmp
strcpy
strlen
strncmp
strtol
strtoul
vfprintf
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE