Static task
static1
Behavioral task
behavioral1
Sample
adfd205aef9df977b52dcba3312a9c233d88203ab8aaee8915563f0b4130c438.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adfd205aef9df977b52dcba3312a9c233d88203ab8aaee8915563f0b4130c438.exe
Resource
win10v2004-20221111-en
General
-
Target
adfd205aef9df977b52dcba3312a9c233d88203ab8aaee8915563f0b4130c438
-
Size
28KB
-
MD5
1137928986be6fc2f308c48397dff3b2
-
SHA1
928d527bbdb1a9c3230c029fc6b946cdfce609c1
-
SHA256
adfd205aef9df977b52dcba3312a9c233d88203ab8aaee8915563f0b4130c438
-
SHA512
c5c2901d6aae679a6aa65151e4b9944afc320bf713cff86a0abd394fc5cde7cdfd79ad6c2731b502e8678d50fa6c2508369a3d4ca2b9023eb482d099bebd8f3d
-
SSDEEP
192:NlC5j2vy+ogJcrpYsZdVwyHrZ9k0ODwrxDwLl7DQh38jSeBbl:y5CvN4usJwyIjwlwxAh3aSeRl
Malware Config
Signatures
Files
-
adfd205aef9df977b52dcba3312a9c233d88203ab8aaee8915563f0b4130c438.exe windows x86
111d69465023965519e59851d9dd8481
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
OutputDebugStringW
HeapAlloc
GetSystemInfo
GetVersionExW
HeapCreate
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
GetStartupInfoW
ExitProcess
HeapFree
lstrcmpiW
OpenThread
Sleep
WaitForMultipleObjects
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
lstrlenW
SetEvent
user32
GetMessageW
CharNextW
DispatchMessageW
PostThreadMessageW
ole32
CreateClassMoniker
GetRunningObjectTable
CoUninitialize
CoInitialize
oleaut32
LoadRegTypeLi
SysStringLen
SysFreeString
atl
ord21
ord20
ord18
ord57
ord17
ord32
ord16
ord58
ord30
ord23
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ