Static task
static1
Behavioral task
behavioral1
Sample
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe
Resource
win10v2004-20221111-en
General
-
Target
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f
-
Size
1.9MB
-
MD5
69c870bdcf23e022f4d34143f9ffcc30
-
SHA1
dab98ca0cbbe417b05290779558883a7195437f8
-
SHA256
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f
-
SHA512
cb0d0a75b91e10a16e6dfc21454f32594780fa2961bf49ea350cef9ad3804323b3720a83ccff8620db37b0c984d542a05d0a09975d7033c72b3c2b4dc6f49a72
-
SSDEEP
49152:Ws6HVnfBRX6CCM+wVvpMxDBpwz3rhabYBr4/bgZzyaujx:l6HdpRXwM+wlpM3iz3/Br4/b3au9
Malware Config
Signatures
Files
-
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe windows x86
6e2692da31742160813243ade02aec54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
OpenSCManagerA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
.text Size: 45KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE