Static task
static1
Behavioral task
behavioral1
Sample
ad7a5434bd831ac1db2c2892bb330b2973f330cd87dd57d4932db0cea427b214.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad7a5434bd831ac1db2c2892bb330b2973f330cd87dd57d4932db0cea427b214.exe
Resource
win10v2004-20221111-en
General
-
Target
ad7a5434bd831ac1db2c2892bb330b2973f330cd87dd57d4932db0cea427b214
-
Size
759KB
-
MD5
2f81ed889ce430ea904875a7756eed97
-
SHA1
407749d7c0a4e07ede17d7f9ee4c451ed6b4b20d
-
SHA256
ad7a5434bd831ac1db2c2892bb330b2973f330cd87dd57d4932db0cea427b214
-
SHA512
c65a369425d4741e9789ec40c87b82c149469229ea0a6ac3bb7ac6a051680573fb191124ef688bbeae1a327591a14fde33ea0866a86dcfd3f6d1a7eef174c1ca
-
SSDEEP
12288:JfHuKBIhobFQ9bhIEQ9VperlzQZNewuObmCzvxdKwHxCcCKjGjoJbe9Ziwywfuf5:JfHuKf0JQ9Vper2ZNe9ObHzUcCKjGjob
Malware Config
Signatures
Files
-
ad7a5434bd831ac1db2c2892bb330b2973f330cd87dd57d4932db0cea427b214.exe windows x86
0d45df01442a2ddf6f5dce49ea890e95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetCommandLineA
GetStartupInfoA
DeleteFileW
TlsGetValue
HeapDestroy
GetEnvironmentVariableA
lstrlenA
ResetEvent
VirtualQuery
GetVolumePathNameA
GetTimeFormatA
CloseHandle
GetCommandLineA
CreateEventA
GetModuleHandleA
CancelIo
GetConsoleTitleA
CloseHandle
HeapCreate
advapi32
CreateProcessAsUserA
ControlService
RegDeleteValueA
CreateServiceW
IsValidSid
InitializeSid
RegQueryValueW
IsValidSecurityDescriptor
RegCreateKeyExW
IsValidAcl
IsTextUnicode
ClearEventLogW
RegEnumKeyA
resutils
ResUtilGetSzValue
ResUtilGetSzValue
ResUtilGetSzValue
ResUtilGetSzValue
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 754KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ