Static task
static1
Behavioral task
behavioral1
Sample
dad0135a43fe9cf61ce74e6f2d64d4981db962551a4f9bbd1e430f17b99a63a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dad0135a43fe9cf61ce74e6f2d64d4981db962551a4f9bbd1e430f17b99a63a2.exe
Resource
win10v2004-20220812-en
General
-
Target
dad0135a43fe9cf61ce74e6f2d64d4981db962551a4f9bbd1e430f17b99a63a2
-
Size
60KB
-
MD5
bff82fe171bcf9c5f38017bcde06e07c
-
SHA1
ad58aed51da858286665291c055332dad9d40bc2
-
SHA256
dad0135a43fe9cf61ce74e6f2d64d4981db962551a4f9bbd1e430f17b99a63a2
-
SHA512
7e18b9bbdee37c9f22947fee92c06b95d35331adbc5ebd5323d4ff02f1e3278a0f0cb7eef98ab432982880bc6791de8f2e1d2b152ddd801103e3dfaae5e3b2d1
-
SSDEEP
768:rYC/GDdAkJC7W+A4RrKAuDiIcqaymmVxSjHoPc1oCQdhM:seGDW1FUvurqYmVxQH91oDM
Malware Config
Signatures
Files
-
dad0135a43fe9cf61ce74e6f2d64d4981db962551a4f9bbd1e430f17b99a63a2.exe windows x86
02b686fcaafff9796491aa6b0b08ec03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
HeapCreate
VirtualFree
CompareStringW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CloseHandle
WriteFile
HeapDestroy
CompareStringA
SetEnvironmentVariableA
VirtualAlloc
HeapReAlloc
GetFullPathNameA
GetCurrentDirectoryA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetFilePointer
FlushFileBuffers
SetStdHandle
ReadFile
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetProcAddress
LoadLibraryA
SetEndOfFile
version
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ