Static task
static1
Behavioral task
behavioral1
Sample
7f16919a930dc5471ab09505e307b1d628ccb0bdd972507f69f7f12b2f7a5bcf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7f16919a930dc5471ab09505e307b1d628ccb0bdd972507f69f7f12b2f7a5bcf.exe
Resource
win10v2004-20220812-en
General
-
Target
7f16919a930dc5471ab09505e307b1d628ccb0bdd972507f69f7f12b2f7a5bcf
-
Size
107KB
-
MD5
ebe05ee8afc187929254e27c1436ad78
-
SHA1
0cfb62a4e6da692cce5a7b3202028a75622ab7f8
-
SHA256
7f16919a930dc5471ab09505e307b1d628ccb0bdd972507f69f7f12b2f7a5bcf
-
SHA512
3037d17d54e1b03abcfe91ea564896341af3cf661baae56be6a043e80e8245fe834fdcfef0870995b1a1850ac3366c9196fa78c4649f61507145f09e0b94d7e0
-
SSDEEP
1536:XJLw3KU4CPMgBIsl2s6Kx6px2xB97Ep30dulvWF8xrxhvzh+MsJcLCv7u:X9ag2isZaMD7Eh0EsF8xbIMkcS7u
Malware Config
Signatures
Files
-
7f16919a930dc5471ab09505e307b1d628ccb0bdd972507f69f7f12b2f7a5bcf.exe windows x86
85d7bcd320a5c84725e11ef52b26f479
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
DeleteFileW
UnhandledExceptionFilter
GetLocaleInfoA
SetLastError
MultiByteToWideChar
InterlockedExchange
RtlMoveMemory
FileTimeToSystemTime
GetEnvironmentStringsW
GetModuleFileNameW
FormatMessageA
IsBadReadPtr
GetUserDefaultLangID
OutputDebugStringA
GetProcAddress
GetTimeZoneInformation
GetModuleHandleA
GetThreadLocale
LoadResource
VirtualProtect
SetStdHandle
SizeofResource
GetCommandLineA
DeleteFileA
LocalFree
GetTempPathA
msvcrt
_controlfp
_XcptFilter
_adjust_fdiv
__p___initenv
_except_handler3
_exit
__getmainargs
__set_app_type
__p__commode
__p__fmode
tan
_initterm
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Rigyf Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ