Static task
static1
Behavioral task
behavioral1
Sample
6dac46470459115b637300a16dde5142281be338b2375483eecee0d579973876.exe
Resource
win7-20220812-en
General
-
Target
6dac46470459115b637300a16dde5142281be338b2375483eecee0d579973876
-
Size
107KB
-
MD5
233ebce8915c3db92cf0e1d6f2454230
-
SHA1
fee250656056d145db60f5305cc17abb9e7b4c7e
-
SHA256
6dac46470459115b637300a16dde5142281be338b2375483eecee0d579973876
-
SHA512
ad806a741dcdfbb2a46ac6b9930fdb6d902465a597104506741f3c7ea85bd7aeb8a0e4a566bfd92241684e360fd5ae1051d7e76765cad6f877eb68a49c0e4e10
-
SSDEEP
3072:gsPf1HUMqw5UwEY2ZFKaah0y9fBKyyKKuhiDzWDqxDzt/g3S:9HUC50Y2GP0qfWAgxDS
Malware Config
Signatures
Files
-
6dac46470459115b637300a16dde5142281be338b2375483eecee0d579973876.exe windows x86
6e0a258702b74cd0bd16fef290bebb14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatW
GetLastError
CreateEventW
GetDiskFreeSpaceW
Heap32First
FindResourceW
DeviceIoControl
InterlockedDecrement
ReadFileEx
lstrcpyW
LoadLibraryA
ReadConsoleA
GetDiskFreeSpaceW
CloseHandle
GetPrivateProfileIntA
SetEnvironmentVariableA
ExitProcess
GetStringTypeW
HeapCreate
InterlockedIncrement
HeapReAlloc
adsldpc
ADsExecuteSearch
ADsCloseSearchHandle
ADsDeleteClassDefinition
ADsEnumAttributes
uxtheme
CloseThemeData
IsThemeActive
GetThemeTextExtent
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeSysSize
SetWindowTheme
GetThemeTextMetrics
GetThemeColor
GetThemeBool
DrawThemeEdge
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ