Static task
static1
Behavioral task
behavioral1
Sample
ad0b5a9e37c5a4a887f8265e07efff946dbb81f3a9da36a4065391c3edffd70b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad0b5a9e37c5a4a887f8265e07efff946dbb81f3a9da36a4065391c3edffd70b.exe
Resource
win10v2004-20221111-en
General
-
Target
ad0b5a9e37c5a4a887f8265e07efff946dbb81f3a9da36a4065391c3edffd70b
-
Size
400KB
-
MD5
0b8bae993bb09b698f43178f6d7b52e2
-
SHA1
eea562a0342cb0c8fd3446e0621d695219dea6bb
-
SHA256
ad0b5a9e37c5a4a887f8265e07efff946dbb81f3a9da36a4065391c3edffd70b
-
SHA512
770b341b8c967def22fade39f17c4e02a339826ba1f8844299d364e04ee6756b55bedc1bc9464e8b2646e1e9767c802786d380ca9d4d2941a5e0cc4309cf1e97
-
SSDEEP
6144:iTAqNViKc2sg1b+jSmE10GkcHUwRmuY6DghPRCyUXP2himNCaz7O:VKt71b2SX1/pk6Dk5C9f2hia7
Malware Config
Signatures
Files
-
ad0b5a9e37c5a4a887f8265e07efff946dbb81f3a9da36a4065391c3edffd70b.exe windows x86
4677b100d7fb70c8a173d05510d2e891
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CompareFileTime
SystemTimeToFileTime
GetDateFormatW
GetWindowsDirectoryW
DeleteFileW
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
FileTimeToLocalFileTime
CreateThread
CompareStringW
MulDiv
SetEndOfFile
GetFileSize
GetTimeFormatW
GetSystemInfo
WriteFile
LocalFree
CreateFileW
IsBadReadPtr
HeapAlloc
HeapFree
GetLastError
GetStartupInfoA
GetCommandLineW
GetFileAttributesExW
GetCurrentDirectoryW
FindClose
GetStartupInfoW
GetSystemTimes
FindFirstFileW
ExitThread
user32
GetDlgItemTextW
DestroyWindow
SetClassLongW
CreateWindowExW
SetForegroundWindow
wsprintfA
WinHelpW
ChildWindowFromPoint
ShowWindow
EndPaint
FindWindowW
GetWindowLongW
CharLowerBuffW
IsDlgButtonChecked
CheckRadioButton
GetSysColor
GetParent
BeginPaint
RegisterClassW
LoadCursorW
IsChild
GetWindowModuleFileNameA
SetWindowLongW
GetDlgItem
EnableWindow
CheckDlgButton
LoadIconW
SetFocus
CharUpperBuffW
advapi32
RegEnumKeyExA
OpenSCManagerW
RegOpenKeyExW
CloseServiceHandle
RegCreateKeyExW
QueryServiceConfigW
RegDeleteKeyA
RegSetValueExW
shell32
SHBrowseForFolderW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
msvcrt
printf
exit
comctl32
PropertySheetW
CreateStatusWindowW
shlwapi
StrCmpNIW
setupapi
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDriverInfoW
Sections
.text Size: 332KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE