Static task
static1
Behavioral task
behavioral1
Sample
7ca1f41e5bc924afe8440fc1dbfaaa5c10b2b2e698b6269db92d2440a2513149.exe
Resource
win7-20220414-en
General
-
Target
7ca1f41e5bc924afe8440fc1dbfaaa5c10b2b2e698b6269db92d2440a2513149
-
Size
544KB
-
MD5
d76bc4abf99e951141de0a468fe5732c
-
SHA1
3cd63c3de747af4e0b4d201b49d604fcd2c249a5
-
SHA256
7ca1f41e5bc924afe8440fc1dbfaaa5c10b2b2e698b6269db92d2440a2513149
-
SHA512
3ed269b846c19c153819fb4fead888008cd7b353666cf545e4f7fb98cfaa5e7fdcf0afac54e4f2d10ea708f5af56450e9c5cc84d5b19dde064ed80fb6e5032c5
-
SSDEEP
12288:EM0x99nYDO7QEIcTxATcbwMDwLPdFsN99CQiFmeX:EZ99IMQMtAQbw9P3sNKLm
Malware Config
Signatures
Files
-
7ca1f41e5bc924afe8440fc1dbfaaa5c10b2b2e698b6269db92d2440a2513149.exe windows x86
73cdca30c6ea0a1cceb1acd544219ee9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
WriteTapemark
GetUserDefaultLCID
FindNextVolumeMountPointA
FormatMessageA
GetCurrencyFormatA
GetUserDefaultLangID
GetCommandLineA
LoadLibraryW
ReadFile
lstrlenW
IsBadStringPtrA
SetConsoleTitleA
WritePrivateProfileStringW
GetTempPathW
GetProcAddress
GetLongPathNameA
OpenWaitableTimerA
GetProcessWorkingSetSize
LocalAlloc
GetTapeParameters
OpenFileMappingA
LocalFree
LCMapStringW
ReplaceFileA
lstrcmpA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
user32
GetCaretPos
Sections
.text Size: 437KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 60.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ