Static task
static1
Behavioral task
behavioral1
Sample
e7ee85177d3faeee0048788ea962a104b2b1814406060a2b8e13a529061144f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7ee85177d3faeee0048788ea962a104b2b1814406060a2b8e13a529061144f2.exe
Resource
win10v2004-20220812-en
General
-
Target
e7ee85177d3faeee0048788ea962a104b2b1814406060a2b8e13a529061144f2
-
Size
296KB
-
MD5
a9e424800fc936dcd82807f7d9971327
-
SHA1
7f4de4fff1ff658cd9f850402fd12bf7fcaf4e38
-
SHA256
e7ee85177d3faeee0048788ea962a104b2b1814406060a2b8e13a529061144f2
-
SHA512
b7dcb86221bd31ebc8ccac33d90808c1309a3c9bee3d4466f373d0185d23a616d9c48fd351a69e924fdbbe0c7c2bdb4c8c0f0ee7efb94c2a041dea1b04b84d03
-
SSDEEP
6144:EwEleH4vkmovMTJkrnJjdrGATtiFEBx+4dqYHgRn2PrMlFHD:EpleH4zoSEJxrG4tuEnIIgd2rMlFj
Malware Config
Signatures
Files
-
e7ee85177d3faeee0048788ea962a104b2b1814406060a2b8e13a529061144f2.exe windows x86
44c63669fd7aac35750ae86ddc394c31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDiskFreeSpaceW
ReadConsoleA
GetPrivateProfileIntA
lstrcatW
CreateEventW
GetStringTypeW
Heap32First
HeapCreate
SetEnvironmentVariableA
InterlockedDecrement
FindResourceW
DeviceIoControl
LoadLibraryA
CloseHandle
GetLastError
ReadFileEx
InterlockedIncrement
lstrcpyW
ExitProcess
HeapReAlloc
GetDiskFreeSpaceW
adsldpc
ADsDeleteClassDefinition
ADsEnumAttributes
ADsCloseSearchHandle
ADsExecuteSearch
uxtheme
DrawThemeEdge
CloseThemeData
GetThemeBool
CloseThemeData
OpenThemeData
GetWindowTheme
GetThemeColor
GetThemeTextMetrics
GetThemeTextExtent
DrawThemeBackground
GetThemeSysSize
SetWindowTheme
IsThemeActive
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ