Static task
static1
Behavioral task
behavioral1
Sample
7b0cd4f139b712e7c500fcbb1060659e4ceb63d6ce3590df0028656def6c754c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b0cd4f139b712e7c500fcbb1060659e4ceb63d6ce3590df0028656def6c754c.exe
Resource
win10v2004-20220812-en
General
-
Target
7b0cd4f139b712e7c500fcbb1060659e4ceb63d6ce3590df0028656def6c754c
-
Size
218KB
-
MD5
1ae037e11f1706169c751328319c64df
-
SHA1
011be51dc3e8c9f4277f3a2892fd08d6f35ba9b7
-
SHA256
7b0cd4f139b712e7c500fcbb1060659e4ceb63d6ce3590df0028656def6c754c
-
SHA512
9e30d48d5a7398cc206173aa878c4f39d06c971748cae4c48635da2a5e1f15dd9a14c6da7c8b513ea7a2c9fcf6351eae11f00253302dc69c9cc917540b6d9a76
-
SSDEEP
6144:XHDI3UJ1rCshMTI7Gty174K66mno4U6S:XjI3cNCs6U7fn66mno4UP
Malware Config
Signatures
Files
-
7b0cd4f139b712e7c500fcbb1060659e4ceb63d6ce3590df0028656def6c754c.exe windows x86
1d286c77bbe013eee8d706b5818c52e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayPtrOfIndex
SysFreeString
OleLoadPicture
RegisterTypeLib
SafeArrayUnaccessData
SafeArrayGetElement
comctl32
ImageList_Write
ImageList_DragShowNolock
ImageList_Add
shell32
SHGetFolderPathA
DragQueryFileA
version
VerInstallFileA
VerQueryValueA
user32
DefWindowProcA
WaitMessage
gdi32
GetObjectA
GetDCOrgEx
SetBkMode
GetPixel
GetClipBox
GetDIBits
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHStrDupA
SHEnumValueA
advapi32
RegOpenKeyA
kernel32
EnterCriticalSection
GetCommandLineA
IsBadReadPtr
GetCommandLineW
GetProcAddress
GetTickCount
SetLastError
ExitThread
LoadLibraryA
GetACP
ExitProcess
VirtualAllocEx
FindFirstFileA
GetVersionExA
GetModuleHandleA
GlobalAlloc
MoveFileA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetOEMCP
LocalAlloc
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC0 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ