Static task
static1
Behavioral task
behavioral1
Sample
ad606356585c508862e30eb168cc6b8b19bd1eb6d21cbd3bad50931590d67d12.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad606356585c508862e30eb168cc6b8b19bd1eb6d21cbd3bad50931590d67d12.exe
Resource
win10v2004-20221111-en
General
-
Target
ad606356585c508862e30eb168cc6b8b19bd1eb6d21cbd3bad50931590d67d12
-
Size
80KB
-
MD5
8d6be2355d25b5618040d18699f1a326
-
SHA1
e1275bf53bf67923554101a814802cc0547fa72d
-
SHA256
ad606356585c508862e30eb168cc6b8b19bd1eb6d21cbd3bad50931590d67d12
-
SHA512
64be3789e215bbfad71f4f70b57123757507353aa702dfd32fecdde00b04c102cd198105f0d1a0e16e0658b8b2d12faffbfd36cda119700f503e02bdad2869a7
-
SSDEEP
1536:pQrVXNI5+PcfTKWUs5RA3n1cVGMvx9z782hW8fPL:p4U+Ef11A3n1cAC9z78vYL
Malware Config
Signatures
Files
-
ad606356585c508862e30eb168cc6b8b19bd1eb6d21cbd3bad50931590d67d12.exe windows x86
1b434db024ac97af53a4b8bd0e9b12c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemWow64DirectoryW
GetStartupInfoA
VDMOperationStarted
WritePrivateProfileStringA
GetFileType
CreateVirtualBuffer
GetCurrencyFormatW
GetQueuedCompletionStatus
VerifyVersionInfoW
LocalFree
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE