Static task
static1
Behavioral task
behavioral1
Sample
ada23ed0feedf7618392fb2f9ddda3e6193f80dac6311b641ca530abf047cdbf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ada23ed0feedf7618392fb2f9ddda3e6193f80dac6311b641ca530abf047cdbf.exe
Resource
win10v2004-20221111-en
General
-
Target
ada23ed0feedf7618392fb2f9ddda3e6193f80dac6311b641ca530abf047cdbf
-
Size
424KB
-
MD5
c78c6bf03c50dce7c0d470d2a2d84010
-
SHA1
a3733af37ed7def797f369c483f8397a8dedc29e
-
SHA256
ada23ed0feedf7618392fb2f9ddda3e6193f80dac6311b641ca530abf047cdbf
-
SHA512
ab20d8e86a0f63356aab72bf5e8b2156e3a25a64d62575254d684bb5970ef1aedf2ed11336eb6b73c53732ef6222a5bb10a36eb444fa8c48da844da8ae88ccb4
-
SSDEEP
12288:s96h5mf3I2iwDzgn3Y5h6sriJdmqTFcboF2C:tXa3Kw/gnShkMtC
Malware Config
Signatures
Files
-
ada23ed0feedf7618392fb2f9ddda3e6193f80dac6311b641ca530abf047cdbf.exe windows x86
2cc63542373b5d8298e2b2bdf20509a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ResetEvent
InterlockedExchange
Sleep
GetACP
GetLocaleInfoA
FindFirstFileExA
GetLastError
GetLogicalDrives
GetSystemDirectoryA
RaiseException
GetStdHandle
ReleaseMutex
CloseHandle
HeapCreate
SetErrorMode
GlobalFree
LoadLibraryExA
EnterCriticalSection
VirtualProtect
SetEvent
user32
GetFocus
wsprintfA
GetParent
GetActiveWindow
ValidateRect
ShowWindow
GetWindow
GetWindowTextA
FrameRect
FillRect
ReleaseDC
GetCursorPos
GetClassNameA
EndPaint
BeginPaint
IsIconic
DrawTextA
FlashWindowEx
SetForegroundWindow
dsound
GetDeviceID
DirectSoundCreate
DirectSoundCaptureCreate
DirectSoundEnumerateA
DllGetClassObject
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ