Static task
static1
Behavioral task
behavioral1
Sample
07bd0c69a1332c507b85bf45eaaab62012d5a85410f8c6934636f89421f4b9f0.exe
Resource
win7-20220414-en
General
-
Target
07bd0c69a1332c507b85bf45eaaab62012d5a85410f8c6934636f89421f4b9f0
-
Size
441KB
-
MD5
640d463147a42e2ebadf1b854d42dec6
-
SHA1
ac01be640d2cdccdf69ae9b6c03e66157aa285b0
-
SHA256
07bd0c69a1332c507b85bf45eaaab62012d5a85410f8c6934636f89421f4b9f0
-
SHA512
6b78ef7b582a5a6985c6e52a8c71369cecbeb348bd36b8eac122a1904d16f3e8b4b7b5f322f458ed16af7538fa3e73701ec91bb855a3d69730a05970823afa05
-
SSDEEP
12288:q1EbCQF1zj+Ug22SaVRjYeYDl2g4eDIilV4P7uuzNQ1nOiWjkOz6F:9bCo1zrDhXyecilV41Q1nqYOzy
Malware Config
Signatures
Files
-
07bd0c69a1332c507b85bf45eaaab62012d5a85410f8c6934636f89421f4b9f0.exe windows x86
ba80978415ba86067af76c965fe29f56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrcatA
GetModuleHandleA
SetCurrentDirectoryA
Sleep
LoadLibraryA
DeleteFileW
lstrcpyA
CloseHandle
GetProcAddress
GetFileSize
GetLastError
GetModuleHandleW
lstrlenA
LoadLibraryW
WriteConsoleW
CreateFileW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
OutputDebugStringW
SetConsoleCtrlHandler
GetFileType
GetProcessHeap
SetEnvironmentVariableW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RtlUnwind
FreeLibrary
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
DecodePointer
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-errorhandling-l1-1-0
SetLastError
api-ms-win-core-synch-l1-1-0
InitializeCriticalSectionAndSpinCount
CreateEventW
api-ms-win-core-processthreads-l1-1-0
SwitchToThread
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ