Static task
static1
Behavioral task
behavioral1
Sample
ad3129bdea3678f19da5fd02f9eb04e42d4c4d3bc166224af74beb2744ff9409.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad3129bdea3678f19da5fd02f9eb04e42d4c4d3bc166224af74beb2744ff9409.exe
Resource
win10v2004-20220901-en
General
-
Target
ad3129bdea3678f19da5fd02f9eb04e42d4c4d3bc166224af74beb2744ff9409
-
Size
564KB
-
MD5
21cfeaf23850695b01a5ef7a8e8a7060
-
SHA1
c76095106363951fc974e662f9837db5ff6e48cb
-
SHA256
ad3129bdea3678f19da5fd02f9eb04e42d4c4d3bc166224af74beb2744ff9409
-
SHA512
be8c7d597cf69522da266e1e170829c276cbe16ff3539dfd1b1ed0c52eda841053f0f23446cbf65159a6708c5576693a375a597dc1159658076f0b45e3489d3a
-
SSDEEP
12288:KVdxds+rwLh8D2+zDUweV/lb2WTFcfOHr5:KVdbFwlQ28DUVbZT+GN
Malware Config
Signatures
Files
-
ad3129bdea3678f19da5fd02f9eb04e42d4c4d3bc166224af74beb2744ff9409.exe windows x86
da9d0eab103018ac40e73735755a694b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
VirtualAlloc
GetVersion
HeapAlloc
FormatMessageA
FreeLibrary
HeapReAlloc
GetSystemTimeAsFileTime
CloseHandle
SetFilePointer
GetStringTypeA
lstrcmpiA
GetCPInfo
RaiseException
GetProcAddress
MultiByteToWideChar
GetConsoleMode
GetFileAttributesW
ExitProcess
HeapDestroy
GetExitCodeProcess
WaitForSingleObject
GetFileAttributesA
LCMapStringW
EnterCriticalSection
GetProcessHeap
lstrlenA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeW
LCMapStringA
user32
EnableWindow
DrawTextA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ