Static task
static1
Behavioral task
behavioral1
Sample
04690a6fb91bce90cf1cb0508b80c9eaebdf587515ced649c88005992369107a.exe
Resource
win7-20220414-en
General
-
Target
04690a6fb91bce90cf1cb0508b80c9eaebdf587515ced649c88005992369107a
-
Size
1.2MB
-
MD5
7873656c7b07aa7b0123fff8f886cb5a
-
SHA1
f4c3c985742803e34a64a468217fcc577d1f94ae
-
SHA256
04690a6fb91bce90cf1cb0508b80c9eaebdf587515ced649c88005992369107a
-
SHA512
02335e1c0d1a6bf125caaa46602a35bcce523c4e41ab31bcb1dec1b42d1ccd754b782b382b7c3dab0abfea49b68a880ad5bc74d2b42510457688828dbbb159cc
-
SSDEEP
6144:IcAcig3SuEE/UPTYkkK795PuBSciRzWpI31CRYo67:1fh3SW/Uc5K73PuBMR1a
Malware Config
Signatures
Files
-
04690a6fb91bce90cf1cb0508b80c9eaebdf587515ced649c88005992369107a.exe windows x86
dcc7b8a5850b79317210d7ff20f8c589
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LockResource
DeleteFileW
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
GetProcAddress
LocalFree
IsProcessorFeaturePresent
GetCurrentProcessId
CreateProcessW
GetModuleHandleW
FreeLibrary
GetExitCodeProcess
GetFileAttributesW
SetLastError
FindNextFileW
Sleep
SetFileAttributesW
CopyFileW
OpenProcess
FlushFileBuffers
ReadFile
FindClose
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FreeResource
ResumeThread
GetCurrentThreadId
CreateFileW
WaitForSingleObject
SetEndOfFile
WaitForMultipleObjects
GetModuleFileNameW
WriteFile
GetCurrentProcess
GetCommandLineW
HeapSize
SizeofResource
SetStdHandle
WriteConsoleW
ReadConsoleW
GetProcessHeap
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
LoadLibraryExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
GetConsoleCP
GetConsoleMode
GetFileType
IsValidLocale
VirtualAllocEx
user32
LoadIconA
GetAsyncKeyState
GetDoubleClickTime
gdi32
CreateMetaFileA
GetStockObject
GetSystemPaletteUse
advapi32
RegOpenKeyW
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 930KB - Virtual size: 930KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ