Static task
static1
Behavioral task
behavioral1
Sample
ad4c3cac73f2e7fb75837a2e647010b6e7a1324b75dca43d595c3d22f65f0711.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad4c3cac73f2e7fb75837a2e647010b6e7a1324b75dca43d595c3d22f65f0711.exe
Resource
win10v2004-20221111-en
General
-
Target
ad4c3cac73f2e7fb75837a2e647010b6e7a1324b75dca43d595c3d22f65f0711
-
Size
141KB
-
MD5
da71fda2d1fd2680f292e32a391d486c
-
SHA1
4251b1b3745a8975ff32a808732eb2d95eb7875c
-
SHA256
ad4c3cac73f2e7fb75837a2e647010b6e7a1324b75dca43d595c3d22f65f0711
-
SHA512
5b5e49f5bbe8019d113e42fd2dd49f3fae198839cf8ae5038b441494abb155d503efa12a4b44da5d9cffcc57a47b622ad6de4eb477fd065b7d4e6d42ab8fc0bd
-
SSDEEP
3072:O2IcdnWJt+XuuQRMMIetbaPm8HDsn1WC5cNFAward1HhTrKpYfDtyT8rtM:O2IvzRuQRMMIuaP3HvpNaL/BypAB/xM
Malware Config
Signatures
Files
-
ad4c3cac73f2e7fb75837a2e647010b6e7a1324b75dca43d595c3d22f65f0711.exe windows x86
7b38bb445c0daae91477ceb32611060c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCalendarInfoA
CreateFileW
GetStartupInfoA
IsDebuggerPresent
GetComputerNameExA
GetModuleHandleA
GetLocaleInfoA
GetCalendarInfoW
GetCurrentProcessId
SetTapePosition
ExitProcess
msvcrt
__p__commode
_controlfp
_exit
_ismbbalpha
_initterm
_acmdln
__setusermatherr
exit
_fstati64
strcpy
__p__fmode
_fileinfo
_except_handler3
_adjust_fdiv
_lsearch
__set_app_type
__getmainargs
isalnum
_XcptFilter
_getdllprocaddr
user32
EnumDisplayMonitors
HideCaret
SetFocus
CharNextA
ToUnicode
DdeFreeStringHandle
GetAsyncKeyState
OemToCharW
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ