Static task
static1
Behavioral task
behavioral1
Sample
862cd5dad314dc8a71a47270e9d6790c064ee0c8980d96f7c61581d380a2c944.exe
Resource
win7-20220414-en
General
-
Target
862cd5dad314dc8a71a47270e9d6790c064ee0c8980d96f7c61581d380a2c944
-
Size
424KB
-
MD5
bc67b9a2dae4bdaad9b1f1fcc2910606
-
SHA1
bcd589601dea9c11d77e032a8731ab358f042a12
-
SHA256
862cd5dad314dc8a71a47270e9d6790c064ee0c8980d96f7c61581d380a2c944
-
SHA512
99b2f95045260fd8edc4b142962d0e8ac95b69725e1f63944af12337f84f44e532f66d32b4260ca55e5ccdff1e942aef4642cc3215f8b0bfc63e0ba8495b5eb1
-
SSDEEP
6144:XWr/Zk+YqAipOQkh+y5NT+rtdLkA42HHiptpz4nrIBIdP1FD+k0lXIFjIiNj4uns:XWrxk+3OQPPlky63kQu0mfAok/Oi
Malware Config
Signatures
Files
-
862cd5dad314dc8a71a47270e9d6790c064ee0c8980d96f7c61581d380a2c944.exe windows x86
fb6fb94e4b762fed1b02b86bf34a8b0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
InterlockedDecrement
GetProcAddress
GetModuleHandleA
GetEnvironmentStringsW
CreateEventA
GetACP
GetCommandLineA
GetCPInfoExW
GetUserDefaultLangID
GetLastError
GetConsoleWindow
GetProcessHeap
lstrlenW
ExitProcess
LCMapStringW
CreateThread
GetOEMCP
CloseHandle
InterlockedExchangeAdd
MultiByteToWideChar
FormatMessageW
GetCommandLineW
GetStdHandle
InterlockedExchange
GetTickCount
CreateMutexA
GetStartupInfoA
user32
LoadBitmapA
LoadCursorFromFileA
GetWindow
ShowWindow
winscard
SCardConnectA
ole32
OleQueryLinkFromData
OleInitialize
CLSIDFromProgID
CoUninitialize
setupapi
SetupRemoveFromSourceListA
msvcrt
_XcptFilter
_adjust_fdiv
__setusermatherr
_initterm
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__getmainargs
__p__commode
sprintf
memcmp
_exit
_acmdln
exit
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ