Static task
static1
Behavioral task
behavioral1
Sample
ad2100a0325131547c0076e70da5dec2962f652da544710fdde3abbe0b8f35b2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad2100a0325131547c0076e70da5dec2962f652da544710fdde3abbe0b8f35b2.exe
Resource
win10v2004-20221111-en
General
-
Target
ad2100a0325131547c0076e70da5dec2962f652da544710fdde3abbe0b8f35b2
-
Size
32KB
-
MD5
6360fb1c3f4d238f4103f7b3df424453
-
SHA1
6e1e80e669c94a47f4649bc09bd29b0cf19aaf78
-
SHA256
ad2100a0325131547c0076e70da5dec2962f652da544710fdde3abbe0b8f35b2
-
SHA512
8224b236c814e7b7dc53a640bda256b5d69cabd8c709865e76eb9c1648914bb4d18c38b22a4754a548b1d3668f897c936e2e9fb88dc201c9cdced15f984709fb
-
SSDEEP
768:N+WeCWv2BiZ3cWY+2UIyM705s6lsvWk0J7Bl1lgL:NA07+n/M705sgrgL
Malware Config
Signatures
Files
-
ad2100a0325131547c0076e70da5dec2962f652da544710fdde3abbe0b8f35b2.exe windows x86
1c6f7ef87b11915e79cf777e9a360091
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
CreateEventA
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FormatMessageW
GetThreadLocale
GetWindowsDirectoryA
HeapAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalAlloc
LocalFree
RaiseException
GlobalFree
SetEvent
SetThreadLocale
Sleep
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
lstrcatW
GetWindowsDirectoryW
VirtualAlloc
LoadLibraryW
GlobalAlloc
GetModuleHandleA
ReleaseMutex
ExitProcess
GetLogicalDriveStringsA
FindNextFileA
FindFirstFileA
FindClose
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalMemoryStatus
user32
GetDlgItem
LoadIconA
MessageBoxA
SendMessageA
GetClientRect
SetWindowLongA
DrawEdge
DialogBoxIndirectParamA
EndPaint
SetFocus
EndDialog
CallWindowProcA
BeginPaint
SendDlgItemMessageA
PostMessageA
GetParent
GetSystemMetrics
SetWindowTextA
GetWindowTextLengthA
GetWindowLongA
gdi32
GetStockObject
oleaut32
SysAllocStringByteLen
SysFreeString
comctl32
InitCommonControlsEx
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataR Size: 1024B - Virtual size: 621B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1005KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ