Static task
static1
Behavioral task
behavioral1
Sample
7de767e10420ff4c916ff65e89d800b298778d143e8325542f9010be894eb111.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7de767e10420ff4c916ff65e89d800b298778d143e8325542f9010be894eb111.exe
Resource
win10v2004-20220812-en
General
-
Target
7de767e10420ff4c916ff65e89d800b298778d143e8325542f9010be894eb111
-
Size
418KB
-
MD5
c2f472d677bc65fef16ffae5bd36c0ec
-
SHA1
dc2324471f09db5b031ff4fd41ae03ea165fe86d
-
SHA256
7de767e10420ff4c916ff65e89d800b298778d143e8325542f9010be894eb111
-
SHA512
6ad6299ff9d3843c39d85c1f27010f1f45b0baec9ba4c11685f5f860e749e93b2888c60b75e03a0b64e8af128351e9ea1dd3c4d958780985d84e27a8df7b4559
-
SSDEEP
6144:1RNbmv9TrD7Lw/FgUcrjSNkN602koO7VsxhHhSE3SMQmZ2GZDpQFOibxprWyOC:dmv9TL2GU2ai2D+mhRiM/2GBqFNIC
Malware Config
Signatures
Files
-
7de767e10420ff4c916ff65e89d800b298778d143e8325542f9010be894eb111.exe windows x86
51349255253b0c9d7c192e4abdc5e83b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetTimeZoneInformation
HeapCreate
MultiByteToWideChar
GetProcAddress
HeapDestroy
HeapReAlloc
SetEnvironmentVariableA
GlobalFix
GetLocaleInfoA
GetCurrentProcessId
SetLastError
SetVolumeLabelW
FreeLibrary
SetUnhandledExceptionFilter
TlsSetValue
HeapSize
GetStringTypeA
Sleep
UnhandledExceptionFilter
GetCommandLineW
TlsFree
EnumDateFormatsExA
GetStartupInfoW
InterlockedDecrement
GetConsoleCursorInfo
GetFileType
UnlockFileEx
GetModuleFileNameW
ExitProcess
GetTickCount
SystemTimeToFileTime
SetHandleCount
HeapFree
DeleteCriticalSection
GetModuleFileNameA
GetOEMCP
LoadLibraryA
QueryPerformanceCounter
CompareStringW
VirtualAlloc
EnumResourceLanguagesA
UnlockFile
TlsGetValue
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
WriteFile
EnterCriticalSection
GetACP
GetDateFormatA
LCMapStringA
TlsAlloc
GetUserDefaultLCID
GetCommandLineA
GetSystemTimeAsFileTime
EnumSystemLocalesA
CommConfigDialogW
GetCurrencyFormatW
FreeEnvironmentStringsW
GetCPInfo
lstrlenA
LeaveCriticalSection
InterlockedIncrement
WideCharToMultiByte
MapViewOfFileEx
GetCurrentThread
LCMapStringW
lstrcpyn
GetTimeFormatA
SetConsoleCtrlHandler
GetEnvironmentStringsW
GetExitCodeThread
InterlockedExchange
GetLocaleInfoW
VirtualFree
CompareStringA
IsDebuggerPresent
lstrcmpW
GetEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
HeapAlloc
IsValidLocale
GetThreadPriorityBoost
FindClose
GetStdHandle
VirtualQuery
GetModuleHandleA
IsValidCodePage
GetLastError
GetStartupInfoA
RtlUnwind
gdi32
GetTextFaceA
GetRasterizerCaps
CombineRgn
GetArcDirection
PolyPolygon
PathToRegion
GetGraphicsMode
StrokeAndFillPath
GdiPlayScript
StartDocA
SetViewportOrgEx
GetMapMode
ExtFloodFill
SetICMMode
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 274KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ