Static task
static1
Behavioral task
behavioral1
Sample
7925fb4943617c8bf2740c0d4030243a70d5461d6069ed136c7a0360c9545744.exe
Resource
win7-20220715-en
General
-
Target
7925fb4943617c8bf2740c0d4030243a70d5461d6069ed136c7a0360c9545744
-
Size
440KB
-
MD5
a56c8f7c8cc94966093d7ea2b3241f12
-
SHA1
e12bdd5b96295d73e2bd14b63d5be1dffe485796
-
SHA256
7925fb4943617c8bf2740c0d4030243a70d5461d6069ed136c7a0360c9545744
-
SHA512
5f343bd670d633f403d561312de638a4eac63bb937b86557c39b56f89a86ac94382319a36ac9bff5e9a4401e2f91950f4129e945e51668cd8937ec4a7c8849a6
-
SSDEEP
6144:jpqmyLhLx05Jf8QlhHL045uqldIxAnW6v9zDu/LZrGEdSQ81TPi4fWwAQpSMoolF:jkwOQlhr0MJbrW6NDujdA7iEWvQg7R
Malware Config
Signatures
Files
-
7925fb4943617c8bf2740c0d4030243a70d5461d6069ed136c7a0360c9545744.exe windows x86
4b3fc6cde5868a9d03c4a20a6060a9f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
AddAtomW
FindAtomW
ReadFile
GetProcessHeap
SetEndOfFile
FlushFileBuffers
SetStdHandle
WriteConsoleW
SetFilePointer
GetProcAddress
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
HeapSize
GetLocaleInfoW
SetLastError
GetACP
LoadLibraryW
CreateFileA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
TlsFree
TlsSetValue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
CreateFileW
user32
EndPaint
TranslateAcceleratorW
LoadStringA
LoadIconA
GetNextDlgTabItem
LoadMenuIndirectW
BeginPaint
TranslateMessage
LoadKeyboardLayoutW
PeekMessageA
CreateIconFromResource
GetRawInputDeviceInfoW
LoadAcceleratorsA
LoadBitmapW
DispatchMessageA
OpenClipboard
LoadImageA
LoadCursorW
gdi32
ColorMatchToTarget
CombineTransform
CopyEnhMetaFileW
BitBlt
shell32
ShellAboutA
DragQueryFileW
ShellExecuteA
FindExecutableA
msimg32
TransparentBlt
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ