Static task
static1
Behavioral task
behavioral1
Sample
7832856d9efb5292cbc9d01a4a5dc094b334615bf1d0453071654e7de5fe10b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7832856d9efb5292cbc9d01a4a5dc094b334615bf1d0453071654e7de5fe10b5.exe
Resource
win10v2004-20221111-en
General
-
Target
7832856d9efb5292cbc9d01a4a5dc094b334615bf1d0453071654e7de5fe10b5
-
Size
1.2MB
-
MD5
b3adf2a8385cda4743f7f66b229b1298
-
SHA1
9fc23c8b0d5b1ed647d2a6f6b1a4ee967b95504d
-
SHA256
7832856d9efb5292cbc9d01a4a5dc094b334615bf1d0453071654e7de5fe10b5
-
SHA512
c04798ee8ebd041a2a7aae85e9f6bf30138ad5bf689986f07083429dfabbdb2cb849a9ffcedee28fa978079caacb353e81b53093d4d1fdac5ed052a255b1d264
-
SSDEEP
24576:1LQwGCeFDUp3+VQ6VFLmNnsj2odv7eR1bAOBGo+gXZms97x:VQwGCY4Nz6VFLmNkr7eHAOBGo3x
Malware Config
Signatures
Files
-
7832856d9efb5292cbc9d01a4a5dc094b334615bf1d0453071654e7de5fe10b5.exe windows x86
5fac659b69481aba63bb412a4f394416
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
PathIsExe
DllGetClassObject
RegenerateUserEnvironment
PifMgr_GetProperties
ILIsEqual
ILSaveToStream
OpenAs_RunDLL
DllRegisterServer
ILClone
ILGetSize
DllCanUnloadNow
ILCreateFromPathA
ExtractIconA
adsldpc
ADsWriteClassDefinition
ADSIGetObjectAttributes
InitObjectInfo
GetDefaultServer
ConvertSidToU2Trustee
ADSIGetFirstRow
GetLDAPTypeName
ADSIGetColumn
AdsTypeToLdapTypeCopyTime
ADsGetFirstRow
ADSIExecuteSearch
ADsCloseSearchHandle
AllocADsStr
BerBvFree
kernel32
FileTimeToLocalFileTime
CopyFileExA
ReadFile
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcessId
CreateFileA
VirtualFree
SetFilePointerEx
ExitProcess
GetFileAttributesExA
VirtualAlloc
WaitForSingleObject
SetFilePointer
EnterCriticalSection
CloseHandle
GetProcessHeap
DosDateTimeToFileTime
GetFileTime
LeaveCriticalSection
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrcs Size: 574KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ