Static task
static1
Behavioral task
behavioral1
Sample
3024e34b2824ed82b203e77780d3f7e559cae2aaaa01b3517e8724e12cc7dae7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3024e34b2824ed82b203e77780d3f7e559cae2aaaa01b3517e8724e12cc7dae7.exe
Resource
win10v2004-20220812-en
General
-
Target
3024e34b2824ed82b203e77780d3f7e559cae2aaaa01b3517e8724e12cc7dae7
-
Size
296KB
-
MD5
bcd8ee55f0f3d39e378bc7a6dd40623e
-
SHA1
07160caaaa29f22ecbda88252b02deaeac3a7b6d
-
SHA256
3024e34b2824ed82b203e77780d3f7e559cae2aaaa01b3517e8724e12cc7dae7
-
SHA512
17134a84c17bcfb0479e82959c5bc4bc9fe6e6a6585aa113d6199d72fd813e18c216dcad595539acaac87b93c3ceb343d91fdb42457be0ebc4372385e48fddf7
-
SSDEEP
6144:EU6/BuzrDXP3PHBfP3HLp3PHRsiE4fEkjSdB7Te5aG7kZKQB6IjFwbXM4lxM:r65uzrD/3PHBfP3HLp3PHskSje5annjN
Malware Config
Signatures
Files
-
3024e34b2824ed82b203e77780d3f7e559cae2aaaa01b3517e8724e12cc7dae7.exe windows x86
f5ff4deea1ef6eb5d834f02e25afdcc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedIncrement
ReadConsoleA
VirtualQuery
lstrcatW
GetDiskFreeSpaceA
CloseHandle
HeapReAlloc
GetDiskFreeSpaceA
ReadFileEx
DeviceIoControl
GetLastError
FindResourceA
SetEnvironmentVariableA
HeapCreate
CreateEventW
InterlockedDecrement
GetPrivateProfileIntA
GetStringTypeW
lstrcpyW
Heap32First
LoadLibraryA
adsldpc
ADsCloseSearchHandle
ADsExecuteSearch
ADsEnumAttributes
ADsDeleteClassDefinition
uxtheme
GetWindowTheme
SetWindowTheme
CloseThemeData
GetThemeTextExtent
GetThemeBool
DrawThemeEdge
IsThemeActive
DrawThemeBackground
CloseThemeData
GetThemeTextMetrics
OpenThemeData
GetThemeColor
GetThemeSysSize
SetWindowTheme
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ