Static task
static1
Behavioral task
behavioral1
Sample
ad2ecb5463191de0ea79e603f77e307a8e03e32bf50c313da2ae68beaccb68cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad2ecb5463191de0ea79e603f77e307a8e03e32bf50c313da2ae68beaccb68cc.exe
Resource
win10v2004-20220812-en
General
-
Target
ad2ecb5463191de0ea79e603f77e307a8e03e32bf50c313da2ae68beaccb68cc
-
Size
416KB
-
MD5
028b653bc1138dd2581cc5a4c1ed5eeb
-
SHA1
02842d625067a52f8239f98100a84c369de16b11
-
SHA256
ad2ecb5463191de0ea79e603f77e307a8e03e32bf50c313da2ae68beaccb68cc
-
SHA512
1f33e5cedb41af115b76625f3b711e9cd6558f6cadd4424c4c45c20ebdebb569f238c8ae29587e9ad29510f7cc2ebcdb238f77bcedb88677aa5c4d38a48f1df2
-
SSDEEP
6144:JJmVItiNcjisJiUqFipldn+jBo9rwGaoJYCL8WB9HSvEnP4zWabRicMYgZ5qTnUr:YIarrWlleBo9rc8HL8WTS28WadnMYw
Malware Config
Signatures
Files
-
ad2ecb5463191de0ea79e603f77e307a8e03e32bf50c313da2ae68beaccb68cc.exe windows x86
9c6a8658553d1113ec28dbe2e6dabe40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
FreeLibrary
LoadLibraryW
GetCPInfo
GetCommandLineA
InitializeCriticalSection
GlobalUnlock
GlobalAlloc
WriteConsoleW
FindClose
VirtualAlloc
DeleteFileW
GetStringTypeA
SetStdHandle
GetEnvironmentStrings
TerminateProcess
lstrcpynA
LCMapStringA
FileTimeToLocalFileTime
InterlockedExchange
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WriteFile
GetStringTypeW
LCMapStringW
lstrlenW
GetLocaleInfoA
GetThreadLocale
SetEndOfFile
TlsSetValue
TlsGetValue
VirtualFree
LockResource
LoadResource
DeleteCriticalSection
SetLastError
CloseHandle
GetStartupInfoA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
DeleteFileA
GetEnvironmentStringsW
GetConsoleMode
GetCurrentThread
WriteConsoleA
HeapReAlloc
HeapAlloc
GetStdHandle
GetProcessHeap
Sleep
GetModuleHandleA
GetOEMCP
SetErrorMode
CreateProcessA
GetConsoleCP
GetConsoleOutputCP
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
FormatMessageA
WaitForSingleObject
GetEnvironmentVariableA
GetVersion
HeapCreate
VirtualQuery
SetFilePointer
SetEvent
FindFirstFileA
LocalAlloc
HeapSize
GetCurrentThreadId
CreateEventA
GetACP
ReadFile
GetCurrentProcessId
CreateFileW
CreateFileA
GetModuleFileNameA
GetFileAttributesA
GetModuleFileNameW
GetFullPathNameA
QueryPerformanceCounter
lstrlenA
UnhandledExceptionFilter
GetLastError
FormatMessageW
GetFileType
GetFileSize
SizeofResource
MulDiv
WideCharToMultiByte
CompareStringW
TlsAlloc
GetFileAttributesW
GetTickCount
GetSystemInfo
ExitProcess
FreeEnvironmentStringsA
RtlUnwind
GetProcAddress
GetVersionExA
GetLocalTime
UnmapViewOfFile
HeapDestroy
RaiseException
FindResourceA
LocalFree
HeapFree
IsDebuggerPresent
SetHandleCount
FreeEnvironmentStringsW
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExW
RegSetValueExA
RegOpenKeyExW
user32
IsWindowVisible
GetSubMenu
EndPaint
ScreenToClient
GetWindowRect
SetCursor
SetWindowPos
MessageBeep
PostMessageA
DispatchMessageA
LoadIconA
ShowWindow
DrawTextA
ReleaseDC
SendMessageA
SetWindowLongA
IsWindow
MessageBoxA
RegisterClassA
InvalidateRect
GetDC
LoadCursorA
PeekMessageA
GetWindow
GetFocus
TranslateMessage
CheckMenuItem
GetSystemMetrics
FillRect
EnableMenuItem
ReleaseCapture
SetWindowTextA
EnableWindow
SetTimer
PostQuitMessage
gdi32
SelectObject
DeleteObject
SetTextColor
SetBkMode
CreateCompatibleBitmap
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ