Static task
static1
Behavioral task
behavioral1
Sample
ad5878e864413b7b11b3b8f9d25c1869a0afc591e17ba71a664297c5687d4d03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad5878e864413b7b11b3b8f9d25c1869a0afc591e17ba71a664297c5687d4d03.exe
Resource
win10v2004-20221111-en
General
-
Target
ad5878e864413b7b11b3b8f9d25c1869a0afc591e17ba71a664297c5687d4d03
-
Size
128KB
-
MD5
98cbbb5fdca383965a1f593569a41b57
-
SHA1
d66ca97584d7f77841835038ae28667f91859d9b
-
SHA256
ad5878e864413b7b11b3b8f9d25c1869a0afc591e17ba71a664297c5687d4d03
-
SHA512
b18b58ed760ecc5f511661857d29bbb3592a6dc66319562bda85bec03ef22fb222e1c15a17b03a022c9c9c14fe1c449225d5d28747c0c1dc0d97cf34946c0b6c
-
SSDEEP
1536:8FldNN/8+LC7GemzxeZTYgxg5BjJ8vB7j+2nl4NGCzFbwJ4Xj6aZapk:e1N/RoGemleJGBjJ8lTl4NGCGiGk
Malware Config
Signatures
Files
-
ad5878e864413b7b11b3b8f9d25c1869a0afc591e17ba71a664297c5687d4d03.exe windows x86
3ba2c401468a5c601d6205bd97b7ed2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA
user32
MessageBoxA
msvcrt
_adjust_fdiv
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
strncpy
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE