Static task
static1
Behavioral task
behavioral1
Sample
adaa55fcb0069bacd3e41c99f52cc69eea2421e2f9e844f5c1ed1ece8a2c8b21.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
adaa55fcb0069bacd3e41c99f52cc69eea2421e2f9e844f5c1ed1ece8a2c8b21.exe
Resource
win10v2004-20220812-en
General
-
Target
adaa55fcb0069bacd3e41c99f52cc69eea2421e2f9e844f5c1ed1ece8a2c8b21
-
Size
743KB
-
MD5
9770c86d3e158377642e369bd6d166b0
-
SHA1
260b46fd39d90b1831dcbdb6d62b59be80262493
-
SHA256
adaa55fcb0069bacd3e41c99f52cc69eea2421e2f9e844f5c1ed1ece8a2c8b21
-
SHA512
3fcc5d6632e1f1769c922aec53619c4293469661d42cb190d7074a36d9175af3c346329bd6186c9cfaa2c2ee1cf8c1c0593cc74be11e8565b4a2ef0935e76f92
-
SSDEEP
12288:/G+uuZEZCZrZBQ6u3QaD/7pMU5y3saceZd/B4cFVJBtpd:+bYEAZlBQT9DdMU5ytvac/P7d
Malware Config
Signatures
Files
-
adaa55fcb0069bacd3e41c99f52cc69eea2421e2f9e844f5c1ed1ece8a2c8b21.exe windows x86
cfd52b58616f7619306af816230ab6c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleHandleA
WaitForSingleObject
ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetEnvironmentStringsA
GetLocalTime
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
FindFirstFileW
GetTempPathA
GetCommandLineA
HeapFree
QueryPerformanceCounter
lstrcmpA
GlobalAddAtomW
IsBadReadPtr
TlsGetValue
GetStringTypeA
DeleteFileA
GetLocaleInfoW
GetOEMCP
InterlockedIncrement
GetModuleFileNameW
GetVolumeInformationW
GetEnvironmentStringsW
HeapCreate
HeapAlloc
TlsFree
GetCurrentProcess
SetErrorMode
GetCommandLineW
TlsAlloc
LCMapStringA
GlobalSize
CreateFileA
GlobalUnlock
InterlockedExchange
GlobalGetAtomNameW
ConvertDefaultLocale
Sections
.text Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 168B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ