Static task
static1
Behavioral task
behavioral1
Sample
ad01cc69a1031a67448619cc0b5b9ae053099a34aa2bbcc2ef0501e513dd517c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad01cc69a1031a67448619cc0b5b9ae053099a34aa2bbcc2ef0501e513dd517c.exe
Resource
win10v2004-20221111-en
General
-
Target
ad01cc69a1031a67448619cc0b5b9ae053099a34aa2bbcc2ef0501e513dd517c
-
Size
307KB
-
MD5
79005fa1f7c9dd40ad58ca7148d0cffa
-
SHA1
8c6c8c8e4edb674bf4901c7acee2adadb2409e76
-
SHA256
ad01cc69a1031a67448619cc0b5b9ae053099a34aa2bbcc2ef0501e513dd517c
-
SHA512
8dbdd6faca238b677365879d5e3c9a9abd9a9c101600e598d4f69c1e092a7017632269c77eef2cfb491c48cbb2a3dc406360b7675d7eb97d129c477de611f5bf
-
SSDEEP
6144:0JpD75KlED/aL0eMCletJtjEteWCgAbWJcdHHPOO:0LFWED/aLly5EaBWcdm
Malware Config
Signatures
Files
-
ad01cc69a1031a67448619cc0b5b9ae053099a34aa2bbcc2ef0501e513dd517c.exe windows x86
c01e0862701aebf261356aeef0a34093
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetConsoleAliasW
GetProcessHeap
CreateFileMappingW
GetConsoleTitleA
SetFilePointer
GetModuleHandleW
Heap32First
VirtualAlloc
DeleteFileA
LoadLibraryA
SetEndOfFile
GetStringTypeW
GetStringTypeW
CreateMailslotW
DeleteFileA
Heap32Next
WriteConsoleW
DeleteFileA
GetShortPathNameW
GetACP
SetEnvironmentVariableA
SetCurrentDirectoryA
msoeacct
GetDllMajorVersion
DllCanUnloadNow
ValidEmailAddress
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ