Static task
static1
Behavioral task
behavioral1
Sample
adf4b9edca3b7eacea607e2131b8f9701dab4ac42f777d425f23ee7c7c7fa1a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adf4b9edca3b7eacea607e2131b8f9701dab4ac42f777d425f23ee7c7c7fa1a9.exe
Resource
win10v2004-20220901-en
General
-
Target
adf4b9edca3b7eacea607e2131b8f9701dab4ac42f777d425f23ee7c7c7fa1a9
-
Size
66KB
-
MD5
80bb011bd0e35f00fa3bd8d70198ccb9
-
SHA1
81dd0b7d9d8edecd875c0ea21ff4bc012d646ea0
-
SHA256
adf4b9edca3b7eacea607e2131b8f9701dab4ac42f777d425f23ee7c7c7fa1a9
-
SHA512
c2a8031b396af4a174730857a125f6932a712a611f37c9dc5631f550448bbcc7ecb4ccbc08e6de93f401d83c5148acd467be5ec00d8e4f79d4a71ba7f49239fe
-
SSDEEP
1536:N+niq/hRkvWUMZZrbEp0v14x1RxAFjhHbc4frqJxxVfBd:N+niahRkaZZXR14hxoHvG1fL
Malware Config
Signatures
Files
-
adf4b9edca3b7eacea607e2131b8f9701dab4ac42f777d425f23ee7c7c7fa1a9.exe windows x86
97188d8a996dce990ea2e9b106a13a22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Thread32Next
SetFileApisToANSI
DuplicateHandle
TerminateProcess
RegisterWowExec
GetConsoleAliasExesLengthW
LoadResource
GetConsoleAliasW
VirtualAllocEx
CancelIo
TerminateJobObject
IsBadStringPtrW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE