Static task
static1
Behavioral task
behavioral1
Sample
463d6f48295dbf12f97549814b20facef94684247fc250a98f6546c76be7e21c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
463d6f48295dbf12f97549814b20facef94684247fc250a98f6546c76be7e21c.exe
Resource
win10v2004-20221111-en
General
-
Target
463d6f48295dbf12f97549814b20facef94684247fc250a98f6546c76be7e21c
-
Size
298KB
-
MD5
eeecff7b4c01b63c03e0a31aa814c016
-
SHA1
8faec0d274677c9a9fa8610d3603c1423fd4765e
-
SHA256
463d6f48295dbf12f97549814b20facef94684247fc250a98f6546c76be7e21c
-
SHA512
6ee444f4ed5159f904f2bf99c611a21a258b38de72ebfe42666857def33b5686d78ecf16a80b842347d3d97d54162d8d9e4c40098345c4230d99cc108f8e4b49
-
SSDEEP
6144:PZDPnPsHhCC7fSxXBSXkr17rFfv7duydTmU0BXe5aRucLXEWhcX4s0l/:ZPnP0EXcUtTuE8u5/cQWhcX475
Malware Config
Signatures
Files
-
463d6f48295dbf12f97549814b20facef94684247fc250a98f6546c76be7e21c.exe windows x86
f15cf8fef7d3aba0e581140dd9050cc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
ReadConsoleA
GetLastError
GetPrivateProfileIntA
SetFileTime
SetFileTime
InterlockedExchange
GetFileSize
CreateEventW
GetExitCodeProcess
SetFileTime
ReadFileEx
GetDiskFreeSpaceA
HeapCreate
lstrcatA
GetStringTypeA
lstrcpyW
CloseHandle
LeaveCriticalSection
SetConsoleTitleW
LoadLibraryA
adsldpc
ADsCloseSearchHandle
ADsEnumClasses
ADsCreateDSObject
ADsDeleteDSObject
shell32
StrChrA
SHFree
DragQueryFileA
SHGetSettings
DragFinish
ExtractIconA
SHGetDiskFreeSpaceA
DllUnregisterServer
ShellAboutA
DuplicateIcon
DragAcceptFiles
SHGetMalloc
ShellMessageBoxW
uxtheme
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ