Static task
static1
Behavioral task
behavioral1
Sample
adf0123f38244f659b95d3761bad147fe9c60a8acf69495c444072bd0c97242e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
adf0123f38244f659b95d3761bad147fe9c60a8acf69495c444072bd0c97242e.exe
Resource
win10v2004-20220812-en
General
-
Target
adf0123f38244f659b95d3761bad147fe9c60a8acf69495c444072bd0c97242e
-
Size
124KB
-
MD5
0e025c918a05b69b1623e3dd7901dd7e
-
SHA1
5703ea3df4959049b8806006785d540f68122f29
-
SHA256
adf0123f38244f659b95d3761bad147fe9c60a8acf69495c444072bd0c97242e
-
SHA512
fed019fb31146f69fe6117e777ef67335fd09d08d188626e02571d6c62c184a0ec4e8461d012f88ad9269c5fc58786accd9661af1e4601826246f92fbea25a8f
-
SSDEEP
1536:cygFgw/0hV5Y6FN/mHNtABFHkzFI1aE6EEO2DNYMgi1wH:Kb0FnEtABhkGX6EEO6YMgi8
Malware Config
Signatures
Files
-
adf0123f38244f659b95d3761bad147fe9c60a8acf69495c444072bd0c97242e.exe windows x86
a36581f4a0a69736afd9992b4f771a7a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
WaitForSingleObject
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
HeapDestroy
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ