Static task
static1
Behavioral task
behavioral1
Sample
00333bec644d08c276d753e04e7a21933876509577bfbb1ff2d0d7f4daa25a89.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
00333bec644d08c276d753e04e7a21933876509577bfbb1ff2d0d7f4daa25a89.exe
Resource
win10v2004-20220901-en
General
-
Target
00333bec644d08c276d753e04e7a21933876509577bfbb1ff2d0d7f4daa25a89
-
Size
296KB
-
MD5
a2802bad2df6db88acd4ed2165604992
-
SHA1
c37e2dd15141380985d02e74d62cdadc830805fa
-
SHA256
00333bec644d08c276d753e04e7a21933876509577bfbb1ff2d0d7f4daa25a89
-
SHA512
1a445ae18f397859f8c67e3ab1b24fbeb027af1868da4bb7c9e641fa0efbba2a280fc8ab64ee21711c7c49c74f1e2c90a5041ac78f5d73a702ec26be236a245c
-
SSDEEP
6144:vGeH4vkv/+cWzQzNvxmqnVQmm4KsDIsOEp2zHve4WNZYTdkKW+MCm:vGeH4hchZmGVEsDIUp2zGDYTdkRD
Malware Config
Signatures
Files
-
00333bec644d08c276d753e04e7a21933876509577bfbb1ff2d0d7f4daa25a89.exe windows x86
fc0fc1bb3bd73210af9e2b452d2dd3b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedDecrement
CreateEventW
InterlockedIncrement
HeapCreate
ExitProcess
LoadLibraryA
GetLastError
GetPrivateProfileIntA
DeviceIoControl
GetDiskFreeSpaceW
lstrcatW
FindResourceW
Heap32First
GetStringTypeW
SetEnvironmentVariableA
lstrcpyW
HeapReAlloc
GetDiskFreeSpaceW
ReadConsoleA
ReadFileEx
CloseHandle
adsldpc
ADsExecuteSearch
ADsDeleteClassDefinition
ADsEnumAttributes
ADsCloseSearchHandle
uxtheme
CloseThemeData
GetThemeTextExtent
OpenThemeData
GetThemeBool
GetWindowTheme
CloseThemeData
GetThemeTextMetrics
DrawThemeEdge
SetWindowTheme
DrawThemeBackground
GetThemeColor
IsThemeActive
GetThemeSysSize
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ