Static task
static1
Behavioral task
behavioral1
Sample
2dee9a038e50b6384ce5fe660247ec60eac93cdbd55ef530edba4f44234c6130.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2dee9a038e50b6384ce5fe660247ec60eac93cdbd55ef530edba4f44234c6130.exe
Resource
win10v2004-20221111-en
General
-
Target
2dee9a038e50b6384ce5fe660247ec60eac93cdbd55ef530edba4f44234c6130
-
Size
296KB
-
MD5
8741a2762fdf08417c364fb92c239093
-
SHA1
d618eb0a4c622dff49b17d6cb5a26615108faf5e
-
SHA256
2dee9a038e50b6384ce5fe660247ec60eac93cdbd55ef530edba4f44234c6130
-
SHA512
f054b4ce09c7d2267bf97dfe339271e93b8a001e67a89d4da9203111086563e7ea0deea9c1391b6a5c246a688699e9ccf81e77c7de01242a8d1d85a534483fc1
-
SSDEEP
6144:uUweH4vkCgUCzOCDJw7bCJWpuPjmW0RFXSf1V17FpU3w8VWQyMBHDwYshu:UeH4UO0Jw7bWMu4RFXo1703wtsHD/sg
Malware Config
Signatures
Files
-
2dee9a038e50b6384ce5fe660247ec60eac93cdbd55ef530edba4f44234c6130.exe windows x86
425110531110731b7eca3efb7ea9a2a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Heap32First
GetDiskFreeSpaceW
HeapCreate
FindResourceW
GetDiskFreeSpaceW
ReadConsoleA
InterlockedIncrement
ExitProcess
GetPrivateProfileIntA
GetStringTypeW
CreateEventW
lstrcatW
ReadFileEx
CloseHandle
DeviceIoControl
InterlockedDecrement
HeapReAlloc
GetLastError
SetEnvironmentVariableA
LoadLibraryA
lstrcpyW
adsldpc
ADsCloseSearchHandle
ADsEnumAttributes
ADsDeleteClassDefinition
ADsExecuteSearch
uxtheme
GetThemeSysSize
CloseThemeData
OpenThemeData
IsThemeActive
GetThemeColor
CloseThemeData
GetThemeTextMetrics
GetWindowTheme
GetThemeTextExtent
SetWindowTheme
DrawThemeBackground
DrawThemeEdge
GetThemeBool
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ