Static task
static1
Behavioral task
behavioral1
Sample
ad4c929eeb19957306592e481e68cb0e8937c62bc6b0edac8945d8cef5b30322.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad4c929eeb19957306592e481e68cb0e8937c62bc6b0edac8945d8cef5b30322.exe
Resource
win10v2004-20220812-en
General
-
Target
ad4c929eeb19957306592e481e68cb0e8937c62bc6b0edac8945d8cef5b30322
-
Size
311KB
-
MD5
08729f840b194467d35988c9f8f72852
-
SHA1
3924c1d2f2e385a713a81dbc6cf76aa421e21191
-
SHA256
ad4c929eeb19957306592e481e68cb0e8937c62bc6b0edac8945d8cef5b30322
-
SHA512
d7552bfe711f1a296cb8e425da8f390f09b2d5c615acdbe203c8bb0e760ea14ddffd6d406b4ac320b3f06a5340e7cf6442f0009f5e138be29da148cc9e9b2169
-
SSDEEP
6144:RPsn8YMs5a8nqK7eEvRoOY5Oka6Q2iH0699R2rF531xjk:R0n8FK7eEvyOY8kb/c4p91K
Malware Config
Signatures
Files
-
ad4c929eeb19957306592e481e68cb0e8937c62bc6b0edac8945d8cef5b30322.exe windows x86
583f06adfdb1f89bdbe8ac7f87b49687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetVolumeInformationA
GlobalFindAtomA
GetPriorityClass
CompareStringA
TlsGetValue
IsDBCSLeadByte
GetConsoleCP
GetUserDefaultLangID
GetExitCodeThread
CreateThread
CreateMutexA
GetProcessHeap
VirtualAlloc
ReleaseMutex
GetStdHandle
GetThreadLocale
TlsFree
CreatePipe
GetModuleHandleA
GetOEMCP
user32
InvalidateRect
GetWindowTextA
GetWindowTextLengthA
CloseWindow
ReleaseDC
ValidateRect
GetFocus
GetWindow
ShowWindow
GetActiveWindow
GetClassNameA
GetForegroundWindow
ReleaseDC
RegisterClassA
GetSystemMetrics
IsWindowVisible
GetDC
GetClassInfoExA
IsIconic
shell32
SHCreateShellItem
SHGetFolderPathA
SHBrowseForFolderA
SHChangeNotify
SHGetFileInfoA
ntdsapi
DsBindA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ