Static task
static1
Behavioral task
behavioral1
Sample
5e255063afe6a76862dd595bc903f7d9ef3c25eaddcca0c9656c099a4de28695.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5e255063afe6a76862dd595bc903f7d9ef3c25eaddcca0c9656c099a4de28695.exe
Resource
win10v2004-20221111-en
General
-
Target
5e255063afe6a76862dd595bc903f7d9ef3c25eaddcca0c9656c099a4de28695
-
Size
296KB
-
MD5
543b547481f5b205a207da390b9d32ec
-
SHA1
076553ab2051f290e88922c4899a4fb6eef74a0b
-
SHA256
5e255063afe6a76862dd595bc903f7d9ef3c25eaddcca0c9656c099a4de28695
-
SHA512
e4b03c362fa7b7570d82cf585a5346b31ed391d68ccf3f569c818ef41d5f681e1e94f31eeb0def23f6e88d69cc5ccaa64e1983db932ea1fe5b479d660dc954e0
-
SSDEEP
6144:i/BuzrDXP3PHBfP3HLp3PHInsMmY1OwpOEMRrxa9PVdoXpeSpEeH7KrpbyJQjAfw:i5uzrD/3PHBfP3HLp3PHqJ91zwXRrxmn
Malware Config
Signatures
Files
-
5e255063afe6a76862dd595bc903f7d9ef3c25eaddcca0c9656c099a4de28695.exe windows x86
90958fcdb8d7fb7c419093ddc3c191bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
GetLastError
CloseHandle
GetDiskFreeSpaceA
ReadConsoleA
GetDiskFreeSpaceA
InterlockedDecrement
HeapReAlloc
InterlockedIncrement
ReadFileEx
VirtualQuery
DeviceIoControl
CreateEventW
lstrcpyW
SetEnvironmentVariableA
lstrcatW
GetStringTypeW
Heap32First
LoadLibraryA
GetPrivateProfileIntA
FindResourceA
adsldpc
ADsCloseSearchHandle
ADsDeleteClassDefinition
ADsExecuteSearch
ADsEnumAttributes
uxtheme
IsThemeActive
GetThemeTextExtent
DrawThemeBackground
GetThemeSysSize
OpenThemeData
GetWindowTheme
GetThemeBool
CloseThemeData
GetThemeTextMetrics
CloseThemeData
SetWindowTheme
GetThemeColor
DrawThemeEdge
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ