Static task
static1
Behavioral task
behavioral1
Sample
ad13c89a6da51bb2d23a5fdcb382e428d1fc0d476728d97fb219719b32f19400.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad13c89a6da51bb2d23a5fdcb382e428d1fc0d476728d97fb219719b32f19400.exe
Resource
win10v2004-20220812-en
General
-
Target
ad13c89a6da51bb2d23a5fdcb382e428d1fc0d476728d97fb219719b32f19400
-
Size
23KB
-
MD5
e37fabbfb1e7355ba1ddb0fcc75eda28
-
SHA1
00174c661bd6b4dcf193254f74737db9f6182a08
-
SHA256
ad13c89a6da51bb2d23a5fdcb382e428d1fc0d476728d97fb219719b32f19400
-
SHA512
f4c3f459e66f2996917d262c019755d0589fd0320897645830ac2115dfb4e1fe136ff1a6548fc6df67369f7fe76f4db5a476d3cb5fc0ad854e107304b1409d9d
-
SSDEEP
384:Oycv0Uy2lQUIl/4MTJy6IBq25CgpeDbcjdodtcHWSBZA9ufyBKTk:0vwRUyQkyBWgE3wodtZSBZA9ufyU
Malware Config
Signatures
Files
-
ad13c89a6da51bb2d23a5fdcb382e428d1fc0d476728d97fb219719b32f19400.exe windows x86
72d47f010b69aa0ffcd9de6042e5d4b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr80
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__p__fmode
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
strcmp
__dllonexit
memset
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ