Static task
static1
Behavioral task
behavioral1
Sample
7b5682a746639f19d78104dbbdc629fb71e079d29aee4a15daefea7ee1680f53.exe
Resource
win7-20220718-en
General
-
Target
7b5682a746639f19d78104dbbdc629fb71e079d29aee4a15daefea7ee1680f53
-
Size
272KB
-
MD5
efb7d30ee7ea7b5cafc3e06b568330d9
-
SHA1
405d06200a00c20da24910ff769cc8a5fcbc2c65
-
SHA256
07126a5fb676562b38b6039dd19971e4fc2f90acfd8199be583b0cbb6094432b
-
SHA512
401066e3e5a09fd2cdda40770eb4189367cf30084fd4b225dca723532180e5915f315845c353a7a1fc6515406cc87b636358edbc55e644605880aa2341e0fa2c
-
SSDEEP
6144:p9/kBrNNYyF81kNE0ZrAGOOkgB9yxBkyUGtDVsuvNpSIHLKyioOocvJltUeO15ok:p9/arn+0ZMGOHSyxGGzbvNfhicgWeEqk
Malware Config
Signatures
Files
-
7b5682a746639f19d78104dbbdc629fb71e079d29aee4a15daefea7ee1680f53.zip
-
7b5682a746639f19d78104dbbdc629fb71e079d29aee4a15daefea7ee1680f53.exe windows x86
17d894006bd909847ec5f7cd1793aa2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FoldStringA
InterlockedDecrement
_hread
CancelWaitableTimer
WaitNamedPipeW
BuildCommDCBW
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryW
EnumResourceTypesA
TransmitCommChar
GetFirmwareEnvironmentVariableW
BeginUpdateResourceA
WriteConsoleW
DeleteFileA
GetProcAddress
GetUserDefaultLCID
GetConsoleAliasW
FindFirstChangeNotificationA
RemoveDirectoryA
GetCalendarInfoW
FindFirstFileExW
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
SetConsoleTitleW
GetBinaryTypeW
GlobalAlloc
FindNextFileA
OpenJobObjectA
HeapFree
_lclose
GetComputerNameA
TlsSetValue
SetCalendarInfoW
SetComputerNameA
LoadLibraryA
FoldStringW
GetDiskFreeSpaceW
GetSystemDefaultLangID
SetThreadLocale
FillConsoleOutputCharacterA
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
HeapAlloc
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
CreateFileW
gdi32
GetCharWidth32A
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 32.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ