Static task
static1
Behavioral task
behavioral1
Sample
adecef0e21239404b5ea83096df2846010164b5820442807356f64d1dadcbf4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adecef0e21239404b5ea83096df2846010164b5820442807356f64d1dadcbf4d.exe
Resource
win10v2004-20220901-en
General
-
Target
adecef0e21239404b5ea83096df2846010164b5820442807356f64d1dadcbf4d
-
Size
144KB
-
MD5
7c4af563235bda583f3c2dcb78368a4d
-
SHA1
036af6a00142522cd6f492321bf3eb8c1ebe95c5
-
SHA256
adecef0e21239404b5ea83096df2846010164b5820442807356f64d1dadcbf4d
-
SHA512
90fbfa4810cb02375a2a4ae14dde21f0999bba002435fbd0fb0c326cb557191fff0c1ef16502e22d04570a27b4ae13c75c455f13720ab859512e7c3c9cbc762c
-
SSDEEP
3072:gnzsW/RxU4anpAeLd6uBiMwJ272qsaGb9WZfVAz86cVsvwOh:gn/vceeL0uBdw8z/uWPAzV0sph
Malware Config
Signatures
Files
-
adecef0e21239404b5ea83096df2846010164b5820442807356f64d1dadcbf4d.exe windows x86
12d523ba73040e5ae4ceba33f11b478e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
ExitThread
IsDebuggerPresent
GetModuleHandleA
SetSystemTime
GetCurrentProcessId
TransmitCommChar
DeleteCriticalSection
TransactNamedPipe
RegisterWaitForSingleObjectEx
DnsHostnameToComputerNameA
user32
SetMenu
CharLowerBuffW
DrawAnimatedRects
GetCursorInfo
GetTitleBarInfo
DialogBoxIndirectParamA
TabbedTextOutW
EnumPropsExA
CallMsgFilterA
msvcrt
__setusermatherr
__p__fmode
_adjust_fdiv
__getmainargs
_XcptFilter
_except_handler3
memcpy
exit
_controlfp
_initterm
_acmdln
__p__commode
_exit
__set_app_type
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ