Static task
static1
Behavioral task
behavioral1
Sample
1a3773b40119a7682fcb6ea5d1ae87976b6ac8ecb168bed23a8b0fd5cf2a6007.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1a3773b40119a7682fcb6ea5d1ae87976b6ac8ecb168bed23a8b0fd5cf2a6007.exe
Resource
win10v2004-20220812-en
General
-
Target
1a3773b40119a7682fcb6ea5d1ae87976b6ac8ecb168bed23a8b0fd5cf2a6007
-
Size
296KB
-
MD5
b2b7ef34a4fb9b4bf862f01e3c7943d1
-
SHA1
2f971fe1bec2a70a03293d91e0e6536be89b59a6
-
SHA256
1a3773b40119a7682fcb6ea5d1ae87976b6ac8ecb168bed23a8b0fd5cf2a6007
-
SHA512
aa58e2a10c746d531759109e97b6caa20d9762c968b968c35071eb7cc989bad3a148ae69d0a4c429539b6dfb0a4e0fd6d7906846acebb3e3e360f3bb5c29d083
-
SSDEEP
6144:NyNeH4vkOjMUeNZlzDVcHZ7116DhmK10GiZShjLV:NyNeH4CUeNZJZcHrUQGioh/V
Malware Config
Signatures
Files
-
1a3773b40119a7682fcb6ea5d1ae87976b6ac8ecb168bed23a8b0fd5cf2a6007.exe windows x86
1b4e44532bb8db61e5b736b9054d03d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadFileEx
LoadLibraryA
FindResourceW
GetStringTypeW
GetDiskFreeSpaceW
GetDiskFreeSpaceW
GetPrivateProfileIntA
lstrcpyW
lstrcatW
DeviceIoControl
GetLastError
CreateEventW
SetEnvironmentVariableA
ExitProcess
Heap32First
HeapCreate
InterlockedDecrement
CloseHandle
ReadConsoleA
InterlockedIncrement
HeapReAlloc
adsldpc
ADsCloseSearchHandle
ADsEnumAttributes
ADsExecuteSearch
ADsDeleteClassDefinition
uxtheme
GetThemeTextExtent
DrawThemeEdge
GetThemeSysSize
GetThemeTextMetrics
GetWindowTheme
IsThemeActive
DrawThemeBackground
SetWindowTheme
CloseThemeData
OpenThemeData
CloseThemeData
GetThemeColor
GetThemeBool
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ