Static task
static1
Behavioral task
behavioral1
Sample
ad2e3da14f3a5766cff20be7311638aac429d670d310c0f5881985259437aff8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad2e3da14f3a5766cff20be7311638aac429d670d310c0f5881985259437aff8.exe
Resource
win10v2004-20220812-en
General
-
Target
ad2e3da14f3a5766cff20be7311638aac429d670d310c0f5881985259437aff8
-
Size
574KB
-
MD5
c6334b3979a81fc9be799d9398372b65
-
SHA1
bf98c9f6ec99f299dd64a59a6fb21874e60bcacc
-
SHA256
ad2e3da14f3a5766cff20be7311638aac429d670d310c0f5881985259437aff8
-
SHA512
f491dd44db3849d7f9f4b077f8f97ebe9c7fc88d9c29724d4624b716efae780310335f498d6ff19f3a7ee3b1d96dd4f96b1921d57468b50eaace9a7596482783
-
SSDEEP
12288:LsvpU/n7nN6MoeoLoct82ES0tpJpXSTBomVp4JUH5smOOxBFA:LOU/pZoeOoV2H0tpJQVomVp4aZXPFA
Malware Config
Signatures
Files
-
ad2e3da14f3a5766cff20be7311638aac429d670d310c0f5881985259437aff8.exe windows x86
e99ef24cdd6c83a6968e462ff7526938
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LockResource
LoadResource
GetModuleFileNameA
FindResourceA
CreateMutexA
OpenMutexA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
SizeofResource
ReadProcessMemory
GetStartupInfoA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA
msvcrt
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 918B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ