Static task
static1
Behavioral task
behavioral1
Sample
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7.exe
Resource
win7-20220901-en
General
-
Target
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
Size
111KB
-
MD5
532d06766dab06da461e15a7605a970f
-
SHA1
bfa8d4cbb5fe4f6327ca31d849c228a410d01a49
-
SHA256
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
SHA512
acda1139c9921f5a5318fe0a030bb46f2eb05bb11eb25089ab70ad5377d99bdcd0fc8b4491728c8fda906993da1e93b18fbd0cb1c1ec858af822706868dd583f
-
SSDEEP
3072:/iwcU8Cijs0jwogJAZkX2Q8S6NqlkZ/ub:lcU8sUwog+ZkX2QxqVg
Malware Config
Signatures
Files
-
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7.exe windows x86
36471d9510b54fca4255756d97b67bc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetPrivateProfileIntA
GetExitCodeProcess
ReadFileEx
SetConsoleTitleW
lstrcpyW
GetLastError
LoadLibraryA
HeapCreate
CloseHandle
LeaveCriticalSection
InterlockedExchange
GetStringTypeA
SetFileTime
lstrcatA
ReadConsoleA
GetModuleHandleA
GetDiskFreeSpaceA
SetFileTime
CreateEventW
GetFileSize
adsldpc
ADsCloseSearchHandle
ADsEnumClasses
ADsCreateDSObject
ADsDeleteDSObject
shell32
DragAcceptFiles
SHGetDiskFreeSpaceA
SHGetMalloc
ExtractIconA
SHFree
ShellAboutA
SHGetSettings
DragQueryFileA
DuplicateIcon
StrChrA
DllUnregisterServer
DragFinish
ShellMessageBoxW
uxtheme
SetWindowTheme
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ