Static task
static1
Behavioral task
behavioral1
Sample
7dea2c4d540b2465f40b83125e74d1a18364d34ce3f2c8bdb06c2a4ae6fbf23e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7dea2c4d540b2465f40b83125e74d1a18364d34ce3f2c8bdb06c2a4ae6fbf23e.exe
Resource
win10v2004-20220812-en
General
-
Target
7dea2c4d540b2465f40b83125e74d1a18364d34ce3f2c8bdb06c2a4ae6fbf23e
-
Size
934KB
-
MD5
a2ad26948cfc705f6ad11b9a2297daf8
-
SHA1
517da17de04358e5163fbd8ff75b599d84f3cf89
-
SHA256
7dea2c4d540b2465f40b83125e74d1a18364d34ce3f2c8bdb06c2a4ae6fbf23e
-
SHA512
2e435dfb592b3a1f970a4b4352baecf8e5dc4bfbfbda6c28d84fb8517b211d421eacca17387063f9668b386216366889260584ae4423b24fd7c299bb3a88ef91
-
SSDEEP
24576:2fovjaD0g9hm5/xFRPo4FjCU4zRM0z+lx9kGmBOmMo+W6E:2gvj/gvk/x7PoXU4zRMFrSGAOmAq
Malware Config
Signatures
Files
-
7dea2c4d540b2465f40b83125e74d1a18364d34ce3f2c8bdb06c2a4ae6fbf23e.exe windows x86
89ed5aafd767afc960f07e3adce8853d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetBinaryTypeA
CreateProcessA
WaitForSingleObject
GetTempPathA
GetCommandLineA
LCMapStringW
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
ReadFile
TerminateProcess
GetCurrentProcess
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetTempFileNameA
GetFileAttributesA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetExitCodeProcess
GetProcAddress
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ