Static task
static1
Behavioral task
behavioral1
Sample
adbf9127c062bd86d66b97306f63bb1157df7650b238ebf26097648c406ffd95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
adbf9127c062bd86d66b97306f63bb1157df7650b238ebf26097648c406ffd95.exe
Resource
win10v2004-20220812-en
General
-
Target
adbf9127c062bd86d66b97306f63bb1157df7650b238ebf26097648c406ffd95
-
Size
308KB
-
MD5
85bb5a790094174c0725a38fbe889b8a
-
SHA1
da84e3c8fa98a89895fd7710ddf6f444728d84c5
-
SHA256
adbf9127c062bd86d66b97306f63bb1157df7650b238ebf26097648c406ffd95
-
SHA512
8321f13af0428a29c8f9b1a169a31c79e6015e71aea3b218800193cca81ba2df58f959b97a891534e84f893f616ae74a630234618167d21e07f61062c9f1eba7
-
SSDEEP
6144:sdH8Lr+Ofge23RuZftH81xyUt3EhFMXJWu2ygwPaWF1LuUM7Gm/:sdH8L1b2Buj8xyL2XJlVNKM
Malware Config
Signatures
Files
-
adbf9127c062bd86d66b97306f63bb1157df7650b238ebf26097648c406ffd95.exe windows x86
8aa99215b46a025ef3a3f91a93594018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
SetFileTime
lstrcpyA
GetModuleHandleA
InitializeCriticalSection
HeapCreate
SetFileTime
GetStartupInfoW
FormatMessageW
CloseHandle
lstrcatA
FindResourceW
CreatePipe
CreateMutexW
SetFileTime
GetExitCodeProcess
LeaveCriticalSection
IsBadWritePtr
GetFileSize
LoadLibraryA
ReadFile
mstscax
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
advapi32
RegEnumKeyA
IsValidAcl
IsValidSid
CreateProcessAsUserA
IsTextUnicode
IsValidSecurityDescriptor
CreateServiceW
ControlService
RegDeleteValueA
RegQueryValueW
InitializeSid
RegCreateKeyExW
ClearEventLogW
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE