Static task
static1
Behavioral task
behavioral1
Sample
7bfe08675e4d9e98fe295a3203ef9ed0438d925584fc58b36798e18d8c66e573.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bfe08675e4d9e98fe295a3203ef9ed0438d925584fc58b36798e18d8c66e573.exe
Resource
win10v2004-20220812-en
General
-
Target
7bfe08675e4d9e98fe295a3203ef9ed0438d925584fc58b36798e18d8c66e573
-
Size
186KB
-
MD5
5c192c033c3b4034fa8f4eb0fab96f0f
-
SHA1
2340b0e15864571acfc23e0db20335c5dd55417b
-
SHA256
7bfe08675e4d9e98fe295a3203ef9ed0438d925584fc58b36798e18d8c66e573
-
SHA512
9e7c7bf1dcf456e5895e1c8ce9911172cac0cd81325bc4e045b5b6c0dd4aa86ff36a79c2f0c159a4948ad63a57f7805602f4c5f90188ff740676e070c95a3b80
-
SSDEEP
3072:f/6f2cfzxty4Sanko300Y+ngn3Sy9jIl3O2nQvNNFQUve6rb5njG7VoKCgaJ8jy:36fTtVS+C0LgniyNS/QJve6PZjmOKCGy
Malware Config
Signatures
Files
-
7bfe08675e4d9e98fe295a3203ef9ed0438d925584fc58b36798e18d8c66e573.exe windows x86
47f4aee42f92edb15914e36d0ede112c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
HeapAlloc
ExitProcess
HeapReAlloc
VirtualProtect
lstrlenA
GetCPInfo
GetVersion
GetSystemInfo
SetConsoleCtrlHandler
WideCharToMultiByte
GetCurrentThread
GetOEMCP
IsBadCodePtr
UnmapViewOfFile
GetTickCount
FindNextFileA
WaitForSingleObject
SetLastError
GetModuleHandleA
FlushFileBuffers
SetConsoleCP
GetStartupInfoA
Sleep
LeaveCriticalSection
GetCurrentThreadId
SetStdHandle
GetACP
CreateFileA
advapi32
RegOpenKeyExW
RegQueryValueExA
RegDeleteValueW
IsValidSid
AllocateAndInitializeSid
ole32
CLSIDFromString
user32
OffsetRect
SetWindowLongA
SetWindowPos
wsprintfA
CharNextA
GetWindowLongW
SetWindowTextA
GetScrollPos
GetWindowLongA
msvcrt
__setusermatherr
memset
gdi32
GetStockObject
GetTextMetricsW
RealizePalette
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ