Static task
static1
Behavioral task
behavioral1
Sample
ad10d374b1c18e61704b0e8f5432d49ecfb977140b00b6a6845a22ed60d210ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad10d374b1c18e61704b0e8f5432d49ecfb977140b00b6a6845a22ed60d210ab.exe
Resource
win10v2004-20221111-en
General
-
Target
ad10d374b1c18e61704b0e8f5432d49ecfb977140b00b6a6845a22ed60d210ab
-
Size
2.0MB
-
MD5
60464a2e5913642d91b7c6b228b5c7a6
-
SHA1
1a854cc5d3660d67ec1f60e7ec69050a0b80ae5e
-
SHA256
ad10d374b1c18e61704b0e8f5432d49ecfb977140b00b6a6845a22ed60d210ab
-
SHA512
7fdc65f5ff31a38707e3d462d3097e86e7ac835140090d7a378eed99cf9d16a65d0cb224894810db2b56cd0430b10360bacddd6436157cbcb76ba087cc7fa186
-
SSDEEP
49152:Hy+XtaMT6r51oFkrK6ce4x9KeASYXH9JQD+F:vtaMTlFmKf8oK/QqF
Malware Config
Signatures
Files
-
ad10d374b1c18e61704b0e8f5432d49ecfb977140b00b6a6845a22ed60d210ab.exe windows x64
b99750ab2c66a6add5c5a55eb88b5810
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GlobalFlags
user32
EnableWindow
gdi32
CreateFontIndirectW
advapi32
RegOpenKeyExW
shell32
DragFinish
ole32
CoTaskMemRealloc
oleaut32
VarUdateFromDate
comctl32
ImageList_AddMasked
libmysql
mysql_close
libcrypto-1_1-x64
CONF_modules_unload
libcurl
curl_slist_append
ws2_32
WSACleanup
gdiplus
GdipCloneImage
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
Sections
.text Size: 314KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ