Static task
static1
Behavioral task
behavioral1
Sample
ad9c4e997a218c3600d1373b99f6693a6d5f6d6e1864547f98472d6b881bf330.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad9c4e997a218c3600d1373b99f6693a6d5f6d6e1864547f98472d6b881bf330.exe
Resource
win10v2004-20220812-en
General
-
Target
ad9c4e997a218c3600d1373b99f6693a6d5f6d6e1864547f98472d6b881bf330
-
Size
30KB
-
MD5
2240e13ed00e66d03e4f072f15881d0e
-
SHA1
e6735bc6447787394524793f7eec26235f196ae3
-
SHA256
ad9c4e997a218c3600d1373b99f6693a6d5f6d6e1864547f98472d6b881bf330
-
SHA512
2af914d39283b6602afc244afcf8ed9cc84997fd5270179889ac32986898959284ea157d99f4e55e9953f991b75722fc8fa1ef233e6e2575d8a7d80b02400999
-
SSDEEP
768:rutxjCJdoh80Uv5XsLJs3R8QSHIDcgPgfQWhtBTAg:ruzGJihpe0s3RdSHiOfQLg
Malware Config
Signatures
Files
-
ad9c4e997a218c3600d1373b99f6693a6d5f6d6e1864547f98472d6b881bf330.exe windows x86
6d8b540dece4f08e9032fe5f0b26c9d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_strlwr
strcspn
free
_wsplitpath
_snwprintf
wcsstr
abs
_access
wcsncat
__p__fmode
ntdll
NtQueryInformationFile
RtlSplay
NtReplyWaitReplyPort
RtlSetUserFlagsHeap
RtlUnwind
ZwReleaseSemaphore
NtWaitLowEventPair
ZwAlertThread
ZwAdjustPrivilegesToken
NtTestAlert
NtQueryVolumeInformationFile
kernel32
VirtualLock
GetModuleHandleW
GetTickCount
VirtualAlloc
GetCurrentProcessId
GetCurrentThreadId
VirtualFree
UpdateResourceW
GetSystemWindowsDirectoryA
EnumUILanguagesW
SetLastConsoleEventActive
IsDebuggerPresent
GetDevicePowerState
CreateProcessInternalW
FindFirstFileExW
advapi32
RegOpenKeyW
CloseServiceHandle
OpenServiceW
RegCreateKeyExW
LookupAccountNameW
GetLengthSid
GetSidIdentifierAuthority
AllocateAndInitializeSid
user32
FrameRect
CheckMenuItem
CheckRadioButton
PostQuitMessage
DestroyIcon
SetWindowPlacement
CreateWindowExW
CreateDialogParamW
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ