Static task
static1
Behavioral task
behavioral1
Sample
ad6f364bd21a00435ce945d227305025dd54219e96077e49a747ab77f366a823.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad6f364bd21a00435ce945d227305025dd54219e96077e49a747ab77f366a823.exe
Resource
win10v2004-20220812-en
General
-
Target
ad6f364bd21a00435ce945d227305025dd54219e96077e49a747ab77f366a823
-
Size
381KB
-
MD5
4e47728552aac2ca8c29bbdc0e17a8e6
-
SHA1
720a182ef0b64d026acfc3502af0f6ffbeedae6a
-
SHA256
ad6f364bd21a00435ce945d227305025dd54219e96077e49a747ab77f366a823
-
SHA512
879703b0792c08fbb32e62f76bb3b14e66546c45e80a332a3b8a211285b07995fb18e07085322f4f3c9598b460503eb31501108fd8f0b95e11ea3fc19db1e3cb
-
SSDEEP
6144:3vtRMOSiiWjhtgYXL7TO6dHyF6EDWVUlMVcZOV6fGhmLjAR73t3ygCkv:3vtRMOSMlbq6Vxh8MV9VOpO73tokv
Malware Config
Signatures
Files
-
ad6f364bd21a00435ce945d227305025dd54219e96077e49a747ab77f366a823.exe windows x86
522cc56a5e697fd8ad35128cee344456
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
InterlockedExchange
GlobalSize
GetEnvironmentVariableW
ResumeThread
LocalFree
lstrlenA
ResetEvent
GetPrivateProfileIntW
GetExitCodeProcess
WriteFile
FindVolumeClose
GetModuleHandleW
VirtualAlloc
GetStdHandle
GetCommandLineA
GlobalFree
CreateMutexA
CloseHandle
GetACP
advapi32
RegQueryValueW
CloseEventLog
RegDeleteKeyA
IsValidSid
RegCreateKeyExW
IsTextUnicode
RegDeleteValueA
ControlService
RegCloseKey
CreateServiceA
ClearEventLogA
RegEnumKeyW
IsValidAcl
admparse
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
AdmClose
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ