Static task
static1
Behavioral task
behavioral1
Sample
7b950fd97c6a6e65c3b65231c8ff6ec75360244a48def613f9aa176bf0243f2e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7b950fd97c6a6e65c3b65231c8ff6ec75360244a48def613f9aa176bf0243f2e.exe
Resource
win10v2004-20220901-en
General
-
Target
7b950fd97c6a6e65c3b65231c8ff6ec75360244a48def613f9aa176bf0243f2e
-
Size
424KB
-
MD5
9cadbe6ac817d54c5bd3e1a585dd0414
-
SHA1
4b3afee813b10450d757134d3da9c78982c3d9d7
-
SHA256
7b950fd97c6a6e65c3b65231c8ff6ec75360244a48def613f9aa176bf0243f2e
-
SHA512
df182e39f80f672684ceb116b12d68c9ed07d5380ff4ebfbfdcb453517cc73ab5ecdeeb7fe77cc4bc8c42a620df9f4fa80df4adde070bdfb56b0c80ae047c11a
-
SSDEEP
6144:k8BmLHC9+7SxhjmqsfGCIUZXiwRlDzgnJOGHhZ9al5YgvysriJOydS6UzPuQ7VaW:k6h5mf3I2iwDzgn3Y5h6sriJdYVa6H
Malware Config
Signatures
Files
-
7b950fd97c6a6e65c3b65231c8ff6ec75360244a48def613f9aa176bf0243f2e.exe windows x86
b44c5c45e02bcaff624ecc1754a85b4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileExA
GetACP
SetEvent
InterlockedExchange
GetLogicalDrives
GetStdHandle
VirtualProtect
LoadLibraryExA
GetCommandLineA
RaiseException
GetLocaleInfoA
ResetEvent
Sleep
GetSystemDirectoryA
SetErrorMode
CloseHandle
HeapCreate
ReleaseMutex
GetLastError
GlobalFree
EnterCriticalSection
user32
GetWindowTextA
GetParent
GetWindow
FrameRect
wsprintfA
FlashWindowEx
GetFocus
ShowWindow
GetActiveWindow
FillRect
DrawTextA
EndPaint
GetCursorPos
ValidateRect
BeginPaint
SetForegroundWindow
IsIconic
GetClassNameA
ReleaseDC
dnsapi
DnsApiFree
DnsApiAlloc
DnsFree
DnsApiRealloc
DnsStatusString
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ