Static task
static1
Behavioral task
behavioral1
Sample
7bf8fce6b3a60480231205f2e84ea07575898973a495aab0aea37e9a1e2a3e97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bf8fce6b3a60480231205f2e84ea07575898973a495aab0aea37e9a1e2a3e97.exe
Resource
win10v2004-20220812-en
General
-
Target
7bf8fce6b3a60480231205f2e84ea07575898973a495aab0aea37e9a1e2a3e97
-
Size
236KB
-
MD5
e5db9bb177d9172e064f31e89f95b39d
-
SHA1
e4ebd6f502e6c4b236cda9ec5faf2b39104863dc
-
SHA256
7bf8fce6b3a60480231205f2e84ea07575898973a495aab0aea37e9a1e2a3e97
-
SHA512
8d17e000feebebffc44f20682125ac1e823fedf496728f57314a4cec3b5748692eb79f5a4701af5ab25405a66b7e6178afb1d15794c40ae749c701798f251e0b
-
SSDEEP
3072:SNZE0EuVgwfpyVI3qaXHuOrcgk85zNTnsL552LcectHogmIiyP0dkGrM:6ZLDVgwf4VI6aX575JnsLn9mIf8di
Malware Config
Signatures
Files
-
7bf8fce6b3a60480231205f2e84ea07575898973a495aab0aea37e9a1e2a3e97.exe windows x86
f3cad35265b80c0c1cda5f9e28cb4281
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
LeaveCriticalSection
SetConsoleCtrlHandler
WideCharToMultiByte
GetProcAddress
SetEnvironmentVariableA
HeapReAlloc
SetLastError
GetDateFormatA
HeapSize
GetCurrentProcessId
HeapAlloc
FreeEnvironmentStringsW
GetStdHandle
TlsGetValue
GetModuleHandleA
SetHandleCount
WriteConsoleOutputW
CompareStringW
TlsFree
GetTimeFormatA
IsValidLocale
GetEnvironmentStringsW
IsValidCodePage
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
HeapCreate
EnterCriticalSection
SetConsoleTitleA
ExitProcess
GetTickCount
DeleteCriticalSection
LCMapStringA
HeapFree
GetLocaleInfoW
GetModuleFileNameA
InterlockedIncrement
LoadLibraryA
QueryPerformanceCounter
GetLocaleInfoA
VirtualAlloc
ConnectNamedPipe
GetEnvironmentStrings
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetOEMCP
GetStringTypeA
GetUserDefaultLCID
TlsSetValue
CompareStringA
MultiByteToWideChar
GetFileType
GetSystemTimeAsFileTime
GetProcessHeap
GetCPInfo
LocalCompact
GetStartupInfoA
GetStringTypeW
GetACP
VirtualFree
Sleep
IsDebuggerPresent
FreeLibrary
GetTimeZoneInformation
UnhandledExceptionFilter
EnumSystemLocalesA
LCMapStringW
WriteFile
GetVersionExA
GetLongPathNameW
InterlockedExchange
InitializeCriticalSection
HeapDestroy
GetLastError
TlsAlloc
GetCurrentThread
GetCommandLineA
shell32
ExtractAssociatedIconExA
SHGetMalloc
SHGetSpecialFolderPathW
RealShellExecuteExA
SHGetFileInfoA
SHGetDataFromIDListA
SHGetSpecialFolderPathA
SHFileOperationA
SHFileOperation
SheGetDirA
SHInvokePrinterCommandA
FindExecutableW
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ