Static task
static1
Behavioral task
behavioral1
Sample
ad40c6324e8cd1be4c4bba675b5aed3ac90f3d7ef8a54bcba6cedfc54330174a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad40c6324e8cd1be4c4bba675b5aed3ac90f3d7ef8a54bcba6cedfc54330174a.exe
Resource
win10v2004-20220812-en
General
-
Target
ad40c6324e8cd1be4c4bba675b5aed3ac90f3d7ef8a54bcba6cedfc54330174a
-
Size
128KB
-
MD5
6758888e47cdeca310e704eaf34e7b8c
-
SHA1
b465452b003fbb3323b3f306fe9506534480e8a3
-
SHA256
ad40c6324e8cd1be4c4bba675b5aed3ac90f3d7ef8a54bcba6cedfc54330174a
-
SHA512
59bcce33cc4a664cb85dbb127a29de068177e4aec7262cd675a830a87e4b3bf1951d76d41953fa8709a20797b63fad6a03a156035044200e06aaafc3f5415d0c
-
SSDEEP
1536:I5SWYMDd9vcDy57jLG8/TwvIuS1sH/xp7VHCeJpC:I5XDzcA3TwRSufxTieS
Malware Config
Signatures
Files
-
ad40c6324e8cd1be4c4bba675b5aed3ac90f3d7ef8a54bcba6cedfc54330174a.exe windows x86
55e3d1fbe0095b09af2ccc8a036a84b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CloseHandle
LoadLibraryA
GetTickCount
InterlockedExchange
GetLastError
GetLocalTime
VirtualFree
GetModuleHandleA
GetProcAddress
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetStdHandle
RtlUnwind
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
VirtualQuery
user32
PostMessageA
PeekMessageA
SetActiveWindow
ws2_32
recv
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ